SOC Analyst

Participating in 24 x 7 x 365 coverage for event monitoring and incident detection and supports preliminary incident response where appropriate. Analyzing output from various technologies to effectively identify anomalous events and investigative security incidents.

RESPONSIBILITIES

• Use SIEM solution effectively to monitor day to day notable events.
• Handle any other kind of forwarded security incidents from different teams.
• Triage alerts as they come in and action appropriately. Responsible for triage of alerts, Phishing attempts, and AV Alerts … etc.
• Respond to common alerts in a consistent and repeatable manner from multiple alerting sources.
• Escalate unknown alerts to Level 2.
• Prepare and share shift / incident reports.

REQUIREMENTS