Engineer - SOC Analysis (L2)

Responsibilities

Security Monitoring And Analysis

• Monitor and analyze security alerts and logs from various security systems and tools for suspicious activities.
• Investigate and remediate security alerts and incidents.
• Correlate and analyze data to identify patterns or anomalies.

Security Tools Management

• Maintain and configure security tools and systems including SIEM, NDR, Email Security, and EDR.
• Responsible for implementing new security tools and technologies.

Threat Intelligence

• Stay informed about current cybersecurity threats and vulnerabilities.
• Apply threat intelligence across various solutions and technologies to enhance detection and response capabilities.

Documentation And Reporting

• Maintain detailed records of security incidents, investigations, and remediation efforts.
• Prepare incident reports and documentation for management and stakeholders.
• Develop monthly security reports and provide security incident reports.

Collaboration

• Collaborate with other security team members and IT personnel to share information and best practices.
• Provide guidance and mentorship to junior analysts (L1) as needed.

Required Skills

• Minimum 5 years of experience in a security analyst role, with a focus on incident response and security monitoring.
• Proficiency with security tools and technologies, including SIEM platforms, EDR, and related systems.
• Professional certifications such as SANS are a plus.
• Strong knowledge of security incident response and analysis.
• Good understanding of network protocols, operating systems, and security threats.
• Excellent analytical and problem-solving skills.
• Strong communication and teamwork abilities.

Educational Qualifications

• Bachelor’s degree in Information Security, Computer Science, or a related field.

Desirable

• Familiarity and experience working within the region.
• Experience working as part of an MSSP or MSP provider.