SOC L3 Sr Analyst -Threat Hunter

SOC L3 Sr. Analyst -Threat Hunter
Level of Experience Intermediate Experience in a related filed

Certifications & Licensure

Essential:

One or more of the following technical certificates (or equivalent):

• Certified Threat Intelligence Analyst (CTIA)
• eLearnSecurity Certified Threat Hunting Professional (eCTHP)
• Certified SOC Analyst (CSA)
• Certified Incident Handler (ECIH)
  

Desirable:

• Certified Ethical Hacker (CEH)
• GIAC Cyber Threat Intelligence (GCTI)
• Computer Hacking Forensic Investigator (CHFI)
• CompTIA Linux+
  

Tools & Systems

Essential:

• Advanced knowledge of the following security systems:
  • Security information and event management (SIEM)
  • Next-generation firewall (NGFW)
  • Intrusion detection and prevention (IDPS)
  • Denial of service (DoS) attacks mitigation
  • Endpoint Antivirus/Antimalware
  • Endpoint detection and response (EDR)
• Good knowledge of various operating system including Windows, Linux and UNIX
• Good knowledge of various IT systems including but not limited to database, domain-controllers, email gateways, virtualization and web servers
  

Desirable:

• Good knowledge of the following security systems:
  • Email protection
  • Incident response workflow & automation
  • Threat intelligence & threat hunting
  • Network & malware analysis
  • Data loss prevention (DLP)
  • Privileged access management (PAM)
  • Vulnerability assessment and management (VA/VMS)
  • Penetration Testing