SOC & GRC Security Analyst (Hybrid Onsite)

Job Title

SOC & GRC Security Analyst (Hybrid Onsite)

Location

Dallas, TX

Duration

6 Months

Interview Type

Virtual / In-Person

Note

In the Dallas office at least 3 days a week (Tues, Wed, Thurs)

Description

We are seeking an experienced SOC Engineer with strong Governance, Risk, and Compliance (GRC) expertise to join our Cybersecurity team. The ideal candidate will have hands-on experience in Security Operations Center (SOC) monitoring, incident response, threat detection, vulnerability management, along with a solid understanding of IT ISO 27001, GDPR, NIST Cybersecurity Framework, Third-Party Vendor Risk Management, and Risk Assessments.

Required Skills & Qualifications

GRC & Compliance Skills

• Strong understanding of: 

o IT General Controls (ITGC)

o ISO 27001

o GDPR

o NIST Cybersecurity Framework

o Risk Management Frameworks

o Third-Party/Vendor Risk Management

o Security Risk Assessments

o Audit Management and Compliance Reporting

Soft Skills

• Strong analytical and problem-solving skills.

• Excellent written and verbal communication skills.

• Ability to interact with auditors, business stakeholders, and technical teams.

• Experience preparing executive-level reports and presentations.

Deliverables:

-Process Flows

-Mentor and Knowledge transfer to client project team members

-Participate as primary, co and/or contributing author on any and all project deliverables associated with their assigned areas of responsibility

-Participate in data conversion and data maintenance

-Provide best practice and industry specific solutions

-Advise on and provide alternative (out of the box) solutions

-Provide thought leadership as well as hands on technical configuration/development as needed.

-Participate as a team member of the functional team

-Perform other duties as assigned.

Top Skills

Skills Required:

• Experience with SIEM platforms such as Microsoft Sentinel, Splunk, QRadar, or LogRhythm.

• Hands-on experience with EDR tools such as Microsoft Defender, CrowdStrike, or SentinelOne.

• Knowledge of network security, firewalls, IDS/IPS, email security, and endpoint protection.

• Experience in incident response, threat analysis, and vulnerability management.

• Understanding of MITRE ATT&CK framework and cyber kill chain concepts.

• Familiarity with cloud security concepts across Azure, AWS, or Google Cloud Platform.

Recruiter

Contact: Lokesh - - Eight three two - Nine nine zero - Two four two six