Middle SOC Analyst
Posted on :
14-05-2024
Employer Active
1 Vacancy
Job Alert
You will be updated with latest job alerts via emailValid email field required
Send jobs
Job Alert
You will be updated with latest job alerts via emailValid email field required
Send jobs
Job Description
Req ID : 2834855
- Events correlation rules development;
- Incidents response playbooks development and their automation;
- Security events analysis and monitoring;
- Partaking and/or leading the incident response processes;
- Search, analysis and coordination of vulnerabilities elimination;
- Detection rules operational checks via attacks emulation;
- Security tools research and development;
- Conducting periodic exercises to respond to security incidents;
- Connection of the new log sources and processes to SIEM and SOC tools;
- Define requirements for the secure configuration of the operating systems, networks and services in terms of processing of the information security incidents.
- Requirements:
- Specialized experience in SOC as an analyst for at least 2 years;
- Automation skills (Python);
- Experience in investigating incidents as an L2 analyst, including those affecting remote employees;
- Experience in collecting and processing indicators of compromise from various systems;
- Experience in writing correlation rules;
- Experience in testing correlation searches via attack emulation;
- Knowledge of security mechanisms of modern operating systems;
- Knowledge of how network attacks, attacks on infrastructure, attacks on web applications occur;
- Experience in operating SIEM systems(Splunk as a plus);
- Knowledge of the threats of modern IT technologies;
- Knowledge and experience with Mitre ATT&CK.
Employment Type
Full Time
Company Industry
Department / Functional Area
Key Skills
Report This Job
Disclaimer: Drjobpro.com is only a platform that connects job seekers and employers. Applicants are advised to conduct their own independent research into the credentials of the prospective employer.We always make certain that our clients do not endorse any request for money payments, thus we advise against sharing any personal or bank-related information with any third party. If you suspect fraud or malpractice, please contact us via contact us page.
