Job Brief
Responsible for monitoring the different security systems utilized in a SOC environment to ensure the timely detection of security incidents. This position involves performing daily operational security-related tasks (monitoring, investigating, escalating, and responding)
Key Responsibilities
- Actively monitor security alerts from the SIEM and other security tools to identify potential threats.
- Perform initial analysis to assess the severity and validity of alerts.
- Escalate incidents requiring advanced analysis or response to L2 analysts or relevant teams.
- Review and analyze logs from various sources, such as firewalls, servers, and endpoints, to detect suspicious activity.
- Prepare and maintain periodic reports on security incidents and events for internal teams and stakeholders.
- Respond to customer requests for information or support regarding security incidents or events.
- Assist in maintaining SOC tools, dashboards, and processes under supervision.
- Stay informed about the latest cybersecurity threats and attack vectors.
Qualifications, Skills and Experience
Education: Bachelor Degree in Cyber Security, Computer Science, Computer Engineering or any related field
Level of Experience: Basic Knowledge (0-2Yrs) in IT security, cybersecurity, or SOC operations.
Certifications & Licensure:
Essential:
One or more of the following technical certificates (or equivalent):
• EC-Council Certified SOC Analyst (CSA)
• EC-Council Certified Ethical Hacker (CEH)
• CompTIA Security+
Desirable:
One or more of the following technical certificates (or equivalent):
• Splunk Core Certified Power User
• Cisco Certified Network Associate Routing & Switching (CCNA)
• eCIR (Certified Incident Responder)
Tools & Systems:
Essential:
• Basic knowledge of the following security systems:
o Security information and event management (SIEM)
o Intrusion detection and prevention (IDPS)
• Good knowledge of various operating system including Windows, Linux and UNIX
Desirable:
• Basic knowledge of the following security systems:
o Next-generation firewall (NGFW)
o Endpoint Antivirus/Antimalware
o Endpoint detection and response (EDR)
o Denial of service (DoS) attacks mitigation