Global Cybersecurity Security Operations Center Operations Analyst

As a Global Cybersecurity SOC (Security Operations Center) Operations Analyst, you will be responsible for monitoring, detecting, and responding to security incidents within the organization's IT environment. You will play a crucial role in maintaining the security posture of the organization by identifying and mitigating potential threats and vulnerabilities. This position requires a strong understanding of cybersecurity principles, technologies, and incident response procedures. Additionally, as a senior-level analyst, you should be able to independently take ownership of all aspects of cyber operations functions with minimal guidance from your manager.

1. Read and follow the Underwriters Laboratories Code of Conduct and follow all physical and digital security practices. 

2. 1-2+ years' experience working in security operations center

3. College degree preferred

4. Experience working with end point protection tools, case management/ticketing tools.

5. Strong understanding and usage of SIEM, EDR, O365 Ecosystem & Ticketing system. 

6. Ability to document and create runbooks and generate reports

7. At least one relevant security certifications highly required

8. The schedule may change based on team requirements and operational needs.

9. Perform other duties as directed

What you’ll experience working for ULS 

UL Solutions has been pioneering change since 1894 and we’re still leading the way. From day one, we’ve blazed a trail protecting the planet and everyone on it. Our teams have influenced billions of products, plus services, software offerings and more. We break things, burn things and blow things up. All in the name of safety science. 

That’s where you come in — because none of it could happen without you. It takes passion to protect people, problem-solving to safeguard personal data and conviction to make the world a more sustainable place. It takes bold ideas and brilliant minds to build a better world for future generations across the globe.  

This is more than a job. It’s a calling. A passion to use our expertise and play our part in creating a more secure, sustainable world today — and tomorrow. As a member of our safety science community, you’ll use your ideas, your energy and your ambition to innovate, challenge and ultimately, help create a safer world. 

Everyone here is unique. But we’re also a global community, working together to help create a safer world. Join UL Solutions and you can connect with the brightest minds in the business, all bringing their distinct perspectives and diverse backgrounds together to deliver real change. 

Empowering our customers to keep the world safe means thinking ahead. It means investing in training and empowering our people to learn and innovate. At UL Solutions, we help build a better future — one where everyone benefits. 

Join UL Solutions to be at the center of safety. To learn more about us and the work we do, visit UL.com

#LI-PH1

#Remote

JOB RESPONSIBILITIES:

1. Security Monitoring and Incident Detection:

• Monitor security alerts, logs, and event data from various sources, such as SIEM (Security Information and Event Management) systems, intrusion detection systems (IDS), and firewalls, to identify potential security incidents.
• Analyze network traffic, system logs, and other relevant data to detect unauthorized access attempts, malware infections, or other suspicious activities.
• Investigate and triage security events, classify incidents, and escalate critical issues to the appropriate teams for further analysis and response.
• Analyze user reported emails.

2. Initial Incident Response and Investigation:

• Respond to and analyze suspicious email submissions
• Respond to security incidents in a timely and effective manner, following established incident response procedures and playbooks.
• Conduct detailed analysis and investigation of security incidents, determining the root cause, extent of compromise, and impact on the organization's systems and data.
• Collaborate with incident response teams to contain and mitigate security incidents, minimize the impact, and restore normal operations.

3. Threat Intelligence and Research:

• Stay updated on the latest cybersecurity threats, vulnerabilities, and attack techniques through research, threat intelligence feeds, and industry reports.
• Analyze threat intelligence data to identify emerging threats, indicators of compromise (IOCs), and potential vulnerabilities that may affect the organization's systems.
• Leverage threat intelligence insights to proactively improve security controls, detect advanced threats, and strengthen the organization's security posture.

4. Security Incident Reporting and Documentation:

• Prepare accurate and comprehensive incident reports, documenting incident details, analysis findings, response actions taken, and recommended improvements.
• Maintain incident documentation, including evidence logs, incident timelines, and any other relevant information required for compliance and auditing purposes.
• Collaborate with stakeholders to communicate incident updates, impact assessments, and recommended remediation strategies.
• Maintain operational knowledge base and runbooks

5. Thought leadership:

• Lead relevant projects and act as a resource for colleagues with less experience
• Provide summary reports of monthly trends and noteworthy incidents
• Provide cybersecurity recommendations to leadership based on significant threats and vulnerabilities 
• Conduct research, analysis, and correlation across a wide variety of all source data sets (indications and warnings).

6. Other task:

• Handle internal tickets under Cybersecurity responsibility.