As a SOC Tier 2 Analyst, you will play a critical role in the ongoing protection of our client's information systems. You will be responsible for monitoring, detecting, investigating, and responding to security events and incidents. Your expertise in threat analysis and incident response will also help us maintain a robust security posture to the clients.
Knowledge Preferred:
Strong understanding of networking concepts, protocols, and security architecture.
Proficiency in using SIEM tools, and other security technologies.
Knowledge of malware analysis, forensic tools, and threat hunting practices.
Familiarity with cloud security and endpoint security solutions.
Skills Preferred:
Security Monitoring: Continuously monitor security alerts from security information and event management (SIEM) systems, and other security technologies.
Analysis and Reporting: Analyze logs, network traffic, and other data sources to identify potentially anomalous activity. Prepare detailed incident reports and summaries for management.
Incident Response: Investigate and respond to security incidents escalated by Tier 1 analysts. Conduct a thorough analysis to determine the scope, severity, and root cause of the incidents.
Threat Detection: Proactively hunt for and identify potential threats using advanced threat detection tools and methodologies.
Threat Intelligence: Stay up-to-date with the latest cybersecurity threats, vulnerabilities, and trends. Apply this knowledge to enhance detection and response capabilities.
Tool and Process Improvement: Recommend and implement improvements to SOC processes, tools, and methodologies. Assist in fine-tuning detection rules and enhancing monitoring capabilities.
Collaboration: Coordinate with clients to support resolving security incidents. Provide guidance and support to Tier 1 analysts as needed.
Documentation: Maintain accurate and comprehensive documentation of incidents, investigations, and solutions
Soft skills:
Good analytical and problem-solving skills.
Good communication skills, both written and verbal.
Ability to work effectively under pressure and manage multiple priorities.
Thông tin chung