SOC Monitoring Associate (CPX)

To triage/analyze alerts raised by cybersecurity detection tools deployed onsite or remotely and escalate the ones to be escalated to Senior SOC Analyst. The ability to handle high-pressure and complex situations is essential, along with the capability to work on shifts 24x7.

Responsibilities

• Examine network topologies to understand data flows through the network.
• Use SOC tools for continual monitoring and analysis of system activity to identify malicious activity.
• Identify network mapping and operating system fingerprinting activities.
• Continuously monitor the SIEM events/alerts to identify any anomalies.
• Perform event correlation using information gathered from a variety of sources within the organization to gain situational awareness and determine the effectiveness of observed attacks.
• Detect incidents by monitoring the SIEM console, rules, reports, and dashboards.
• Provide timely detection, identification, and alerts of possible attacks/intrusions, anomalous activities, and misuse activities, and distinguish these incidents and events from benign activities.
• Report the confirmed incident as per the Incident management process.
• Notify the Senior SOC Analyst on suspected/anomaly events for further analysis.
• Document and escalate incidents (including event’s history, status, and potential impact for further action) that may cause ongoing and immediate impact to the environment.
• Monitor the health of the SIEM tool and report any issues/incidents/malfunctions to the SOC SIEM administrator.
• Assist Senior SOC Analyst and other security specialists in incident investigation and workflow.
• Communicate and provide necessary information to external teams for timely incident resolution.

Qualifications

• Any cybersecurity certification is a plus.
• A Bachelor’s Degree in Computer Science or Information Technology (Any area).
• Overall 3+ years’ experience working in a large-scale IT environment focusing on Information Security.
• Minimum 3 years experience in Information and Cyber Security.
• Minimum 3 years experience with SIEM technologies.