SOC Analyst

Job Title

Security Analyst – Threat Monitoring Engineer - L1

Job Scope

The SOC Threat Monitoring Engineer role is part of the Security Operation Center (SOC). Candidates in this role will monitor computer security events according to documented procedures and industry best practices and are the first line of defense in protecting the information systems from internal and external threats. Ideal candidates should be experienced in the areas of networking, client/server technologies, and analyzing log files. Candidates must have strong multitasking capabilities and be able to evaluate threats, vulnerabilities, and risk while under pressure. Candidates must display enthusiasm and interest in Information Security.

Main Duties and Responsibilities

• Monitoring of security events received through alerts from Security Incident and Event Monitoring (SIEM) or other security tools
• Review alerts escalated by the Help desk
• Performing Level 1 analysis of security issues
• Performing initial assessment of the priority of the event (Classification)
• Performing initial determination of incident to determine risk and damage (Triage)
• Performing appropriate routing of security or privacy data request and notifying appropriate contact for security events and response (Escalation)
• Monitoring of alerts and systems health
• Taking an active part in the resolution of incidents, even after they are escalated
• Work assigned via ticket queue 

Position Requirements

• Process and Procedure adherence
• General network knowledge and TCP/IP Troubleshooting
• Ability to trace down an endpoint on the network, based on ticket information
• Familiarity with system log information and what it means
• Understanding of common network services (web, mail, DNS, authentication and etc.)
• Knowledge of host-based firewalls, Anti-Malware, HIDS and other security technologies
• General Desktop OS and Server OS knowledge
• TCP/IP, Internet Routing, UNIX / LINUX & Windows NT 

Education

Bachelor’s degree in Information Technology, Computer Science or any other related field

Experience

• At least 1-4 years of relevant experience in SOC and / or information security roles. 
• Security Essentials – SEC401 (GSEC certification) or equivalent
• Intrusion Detection In Depth – SEC503 (GCIA certification) or equivalent 
• CCNA – Cisco Certified Network Associate or equivalent
• Any CCNP – Cisco Certified Network Professional or equivalent
• CEH –Certified Ethical Hacker or equivalent

#LI-DNI