SOC Analyst, Junior

Role overview

What you will do

• Participate in 24x7 Security Operations Centre operations and monitor, identify and validate SIEM-generated security events.
• Use event and incident management tools, including Sentinel and ServiceNow, and support SIEM changes and updates.
• Coordinate responses to critical business-impacting situations and major security incidents, including timely internal communications.
• Guide colleagues on identifying, containing and remediating security incidents; explain complex cloud and on-premises issues to higher-tier colleagues.
• Document alert handling, acknowledge events, track service desk tickets through resolution and closure, and assign them to the appropriate owner.
• Work with Azure, AWS and Google Cloud Platform technologies and fulfill reporting requests using Long View tools.

Required qualifications and experience

• At least one year of professional experience in incident detection and response, malware analysis or cyber forensics.
• SC-200 certification and experience working with Microsoft Defender.
• Experience with ITSM and performance monitoring tools, SIEM platforms such as Sentinel, Splunk or Sumo Logic, and ITIL-based service requests.
• Experience provisioning client services and completing customer onboarding tasks.
• Ability to troubleshoot technical and procedural issues and communicate effectively with customers in non-technical terms.
• Ability to respond quickly and professionally and willingness to join a 24-hour on-call rotation.

Additional qualifications

• Intermediate network or security certifications such as Security+, Network+, SSCP or CCNA Security are advantageous.
• SC-200, SC-900 or a certification of similar value is also mentioned as an advantage.

Compensation

• Expected salary range is $52,900 to $69,431 per annum.

Benefits and development

• The posting mentions permanent staff positions, paid training, career planning, relocation and travel opportunities, and an RSP plan.