Security Operations Center Analyst - Chuyên Viên Giám Sát Bảo Mật/An Ninh Thông Tin

- Monitoring and Threat Detection:
+ Actively monitor Microsoft Sentinel for security alerts and identify potential threats to the organization's environment.
+ Evaluate and prioritize security events based on severity and potential impact.
+ Detect suspicious behaviors and patterns using event logs, network data, and other security tools.
- Incident Investigation:
+ Investigate alerts to identify indicators of compromise (IOCs) such as unauthorized access, malware activity, or phishing attempts.
+ Correlate data from multiple sources to build a comprehensive picture of potential security incidents.
+ Document findings and maintain detailed records of all events and actions taken.
- Escalation and Collaboration:
+ Escalate verified security incidents to Level 2 analysts or the Incident Response team, providing detailed contextual information.
+ Collaborate with cross-functional teams to mitigate security risks effectively.
+ Maintain communication with stakeholders to ensure timely updates during incidents.
- Initial Response and Remediation:
+ Perform basic response actions under supervision, such as disabling compromised accounts, blocking malicious IPs, or containing suspicious activities.
+ Support efforts to reduce false positives by fine-tuning detection rules and alert configurations.
- Continuous Learning and Improvement:
+ Stay informed on cybersecurity trends, vulnerabilities, and emerging threats.
+ Participate in training programs to deepen your understanding of tools, techniques, and best practices.
+ Contribute to the refinement of SOC processes and playbooks.