Description:
Cybersecurity Analyst (SOC)
🔧 Key Responsibilities
- Monitor multiple sources for potential security incidents, including dashboards, alerts, reports, ticketing systems, emails, and communication channels
- Perform triage and validation of security alerts by following defined incident response procedures
- Escalate confirmed incidents to senior teams (Level III/IV) and assist with mitigation actions
- Maintain detailed and accurate documentation of incidents in case management systems
- Stay updated on company infrastructure, security tools, known vulnerabilities, and emerging threats
- Improve SOC processes by refining detection rules, reducing false positives, and recommending new tools or enhancements
- Collaborate with peers for incident analysis and conduct peer reviews
- Develop expertise in at least one cybersecurity domain (e.g., malware analysis, Python scripting)
- Provide shift updates, reporting, and support continuous 24/7 SOC operations
- Follow internal security policies and contribute to small project initiatives as assigned
✅ Must-Have Qualifications
- English mandatory
- Knowledge or 3-5 years of experience with the following technologies: SIEM, ELK, IDS/IPS, network- and host- based firewalls, data leakage protection (DLP)
- Direct experience with anti-virus software, endpoint detection response (EDR), firewalls and content filtering
- Experience or demonstrable knowledge in Incident response, log analysis and PCAP analysis
- Good level of knowledge in network fundamentals, for example, OSI Stack, TCP/IP, DNS, HTTP(S), SMTP
- Good level of understanding in the approach threat actors take to attacking a network, phishing, port scanning, web application attacks, DDoS, lateral movement
- Knowledge in Windows and/or Linux operating systems, how to investigate them for signs of compromise