To triage/analyze alerts raised by cybersecurity detection tools deployed onsite or remotely and escalate the ones to be escalated to Senior SOC Analyst. The ability to handle high-pressure and complex situations is essential, along with the capability to work on shifts 24x7.
Ready to apply for roles like this?
Unlock the company name and direct application link. Subscribers get instant access to fresh jobs across Dubai, Abu Dhabi and Riyadh, many with visa support.
Unlock employer & apply directly
Responsibilities
- Examine network topologies to understand data flows through the network.
- Use SOC tools for continual monitoring and analysis of system activity to identify malicious activity.
- Identify network mapping and operating system fingerprinting activities.
- Continuously monitor the SIEM events/alerts to identify any anomalies.
- Perform event correlation using information gathered from a variety of sources within the organization to gain situational awareness and determine the effectiveness of observed attacks.
- Detect incidents by monitoring the SIEM console, rules, reports, and dashboards.
- Provide timely detection, identification, and alerts of possible attacks/intrusions, anomalous activities, and misuse activities, and distinguish these incidents and events from benign activities.
- Report the confirmed incident as per the Incident management process.
- Notify the Senior SOC Analyst on suspected/anomaly events for further analysis.
- Document and escalate incidents (including event’s history, status, and potential impact for further action) that may cause ongoing and immediate impact to the environment.
- Monitor the health of the SIEM tool and report any issues/incidents/malfunctions to the SOC SIEM administrator.
- Assist Senior SOC Analyst and other security specialists in incident investigation and workflow.
- Communicate and provide necessary information to external teams for timely incident resolution.
Qualifications
- Any cybersecurity certification is a plus.
- A Bachelor’s Degree in Computer Science or Information Technology (Any area).
- Overall 3+ years’ experience working in a large-scale IT environment focusing on Information Security.
- Minimum 3 years experience in Information and Cyber Security.
- Minimum 3 years experience with SIEM technologies.
