Employer Active
Job Alert
You will be updated with latest job alerts via emailJob Alert
You will be updated with latest job alerts via emailNot Disclosed
Salary Not Disclosed
1 Vacancy
Provides deep dive investigation into a lower volume of more complex attacks often multistage attacks conducted by human attack operators.
Escalation point of Level 1 analysis of alerts and incidents and provide further investigation if necessary
Monitoring of alert and downstream dependencys health
Provides context and insights to support all other functions using a threat intelligence platform (TIP)
Uses threat intelligence to initiate investigations and identify malicious activity
Responsible for assessing IT security infrastructure according to the latest threat intelligence to determine unexpected or stealthy means of network entry.
Provides the necessary technical trainings to the SOC team
Provides transactional technical support to CyberQ Group on other services being offered to clients which includes presales activities and documentations etc.
Responsible for auditing client incident reports to ensure quality SOC alerting and investigation
Performs finetuning of rules in SIEM
Administration of SIEM platform and automations
Provides assistance when needed to other parts of the operations
Primarily responsible for Incident Response Services as First Responder
Provides support on Transactional Consultancy Services such as Incident Response Human Reconnaissance and Cybersecurity Awareness Training and Vulnerability Management
Ensures quality reports and deliverables to client
Provides technical trainings security awareness training as required.
Will work with the SOC Manager for continuous improvement within the operations
Desired skills
Must have the analytical and critical thinking skills to examine security flaws and design robust network security and strategies recommendations.
Must stay up to date with the latest technologies and developments and adopt selfteaching practices to ensure they are up to date with changes in the industry.
Must work closely with their team and other security professionals. He/she must have the ability to share information with all team members concisely and effectively.
The analyst must also be able to effectively handle pressure. The ability to work under pressure during incidents and meet timelines for regular security audits is essential.
Main Requirement
100mbps
Full Time