Engineer - SOC Analyst

About the Role / About the Job
The SOC Analyst is accountable for detecting security incidents in the Security Operations Center (SOC) and translating security impacts to the wider business. The analyst monitors security controls, reviews incident tickets, and leverages emerging threat intelligence to identify affected systems and the scope of attacks.

Main Duties and Responsibilities

• Participate in the gathering, analysis, and communication of threat intelligence through the intelligence process/lifecycle.
• Apply technical skills to analyze files and related components using tools and technologies.
• Perform in-depth analysis of incidents created from the Level 1 (L1) team.
• Understand the underlying behavior and implications on a computer and network environment.
• Respond to customer queries and concerns within a given timeline to address related concerns.
• Determine and direct remediation and recovery efforts.
• Understand vulnerability scans and review vulnerability assessment reports.
• Manage, configure, and improve security monitoring tools (SIEM) among others as per client needs.
• Promote a professional image of the company and the professional services function at all times.

Position Requirements

• At least one security certificate (CEH, OSCP, CISSP, CCNP Sec, etc.).
• Any CCNP – Cisco Certified Network Professional or equivalent.
• Any non-vendor security certificate (CISSP, CISM, ISO27001, GCIA, GCIH, GCFA, GCFE, etc.).
• Understanding of log formats (LEEF, CIF…) and protocols (syslog, ftp, logfile…).
• Knowledge of security devices such as IDS/IPS, HIDS/HIPS, anomaly detection, Firewall, and Antivirus systems and their log output.
• Network forensics: network traffic protocols, traffic analysis (i.e., Network flows and PCAP).
• Working knowledge of SIEM tools (such as RSA, ArcSight, Splunk, and QRadar, etc.).

Education
Bachelor’s degree in Computer Science or any other related field.

Experience
At least 2 years of relevant experience.