About the Role:
The Entry-Level Information Security Analyst is integral to supporting Cyber Defense activities. The role focuses on managing SIEM Administration, monitoring and investigating SOC events, and performing vulnerability assessments. The analyst is tasked with defending the organization against cyber threats through effective monitoring, analysis, incident management, and collaboration with relevant teams. Success in this role involves contributing to the development and improvement of security measures and response processes while maintaining compliance with security policies. The analyst will gain exposure to a variety of tasks and have the opportunity to enhance their skills in a dynamic team environment.
Ready to apply for roles like this?
Unlock the company name and direct application link. Subscribers get instant access to fresh jobs across Dubai, Abu Dhabi and Riyadh, many with visa support.
Unlock employer & apply directly
What You Will Do:
Qradar SIEM Administration
- Administer and maintain QRadar appliances, ensuring software updates, patches, and upgrades are up to date.
- Monitor and analyze security events and incidents detected by QRadar to ensure threat detection.
- Perform regular health checks and optimization of QRadar system components for operational efficiency.
- Troubleshoot and resolve issues related to QRadar functionality and performance.
- Collaborate with IT security teams to develop and refine use cases and detection strategies.
- Provide support to IT teams and stakeholders on QRadar-related matters.
- Document QRadar configurations, processes, and procedures for knowledge management.
Security Operations and Incident Management
- Monitor security alerts and events across various tools including SIEM, IDS/IPS, and endpoint security.
- Investigate and analyze security incidents to determine root cause and impact, taking appropriate response actions.
- Perform in-depth analysis to identify indicators of compromise, tactics, techniques, and procedures used.
- Develop and execute containment, eradication, and recovery plans in coordination with incident response teams.
- Document incident findings and actions taken in incident reports for accountability and compliance.
- Collaborate with IT, network operations, and application teams to implement security controls.
- Participate in security incident response exercises to enhance response processes and procedures.
- Conduct vulnerabilities scanning and support remedial actions with the team.
- Stay informed on emerging threats and technologies through research and training.
Process, Procedure, and Knowledge Management
- Collaborate with SOC team members to update processes, procedures, and activity lists periodically.
- Upgrade and maintain skills as needed to meet SOC analyst requirements.
- Ensure timely vulnerabilities assessment and support closure.
Required Skills To Be Successful:
- Strong knowledge of SIEM tools and security monitoring systems.
- Proficiency in cybersecurity incident response and management.
- Analytical and problem-solving skills for threat detection and mitigation.
- Excellent communication and collaboration abilities with cross-functional teams.
What Qualifies You For The Role:
- Bachelor's degree in information security, computer science, or related field, or equivalent experience.
- 1 to 4 years of experience in a relevant information security role.
- Strong foundational knowledge in information security principles and concepts.
- Proficiency in analytical and problem-solving skills.
- Exceptional communication and teamwork abilities.
- Effective organizational and time management skills, especially in an operational role.
- Commitment to strict adherence to SLAs to support critical business issues.
- Familiarity with commonly utilized security tools and technologies.
