L1 SOC Analyst

Job Description:

1. Continuously monitoring network user activity and security systems or platforms for suspicious patterns or alerts. This includes using tools like SIEM (Security Information and Event Management) to identify and prioritize potential threats.
2. Monitor and respond to security alerts serving as the initial line of defense against detected threats. This includes monitoring and responding to data leakage and data loss detection alerts as well.
3. Focus on reviewing the output of security monitoring and detection tools assessing alerts for potential security incidents. Ability to analyze logs traffic and alerts to identify potential security incidents
4. Ensure incident response investigation procedures and documentation are up to date maintained and followed (process documentation playbooks standard operating procedures etc.).
5. Provide daily operational oversight of Incident Response & Investigations in relation to security alerts or incidents handled.
6. Provide tailored approach to investigations by applying security capabilities in response to identified risks.
7. Act as an SME for complex information security incident response concerns issues and problems.
8. Should have expert and deep knowledge in incident management process and lifecycle management.
9. Investigating the root cause of security incidents assessing their impact and documenting the findings.
10. Taking appropriate actions to contain and remediate identified threats working with other teams to restore normal operations.
11. Proactively searching for and identifying unknown or emerging threats that may have evaded detection by standard security measures.
12. Work with other cybersecurity teams and stakeholders to share information and coordinate response efforts.
13. Preparing detailed reports on security incidents findings and recommendations.
14. Review and interpret system and network logs to identify security alerts and anomalies.
15. Work with cyber security teams IT operations etc. to ensure effective threat management and security posture improvement.
16. Stay informed about the latest cyber security trends threats and technologies to continuously enhance the firms security posture.
17. Strong knowledge of security concepts network protocols and different security tools. Ability to troubleshoot and resolve security issues.