SOC L2 Analyst

Key Responsibilities

• Support and guide the teams performing Cyber Security monitoring to enhance their monitoringtriage investigation processes capabilities prior to escalation
• Leverage detection and response solutions in place to further assess any escalated potentialincidents
• Continuous improvement of Axiata GSOC Cyber Incident detection contextualization andresponse processes leveraging automation and orchestration where possible
• Manage and coordinate potential incidents escalations for investigation along with any requiredinternal or external stakeholders
• Communication and coordination of Cyber Security Incident response actions with OperationalCompanies (OpCOs) of Cyber Security Incidents are within SLA
• Analysis of Threat Intelligence ensuring prevention detection and response capabilities setup ismaximized against those new threats
• In depth analysis of malware or other potential malicious processes or software identified in theorganization
• Coordination of Cyber Security testing activities and providing advice on remediation
• Develop document and maintain SOPs and knowledge base for cyber security services includingincident response intelligence analysis evidence acquisition forensics recovery and others
• Continuous knowledge improvement in tools and best practices in Cyber Security threatmonitoring and incident response including contextualization and automation
• Evaluate new emerging Cyber Security technologies and make recommendations for adoptionwithin GSOC

Person Specifications

Experience and Qualifications

• Minimum 4 years working experience in Cyber Security Incident Management
• Diploma/Degree from Information Technology or equivalent discipline
• Certification such as GCIH GSEC CySA CompTIA CSX (P) CASP and CEH will be addedadvantage

Knowledge and Technical Skills

• Excellent knowledge of Advanced Persistent Threats attack tools techniques and methods usedby adversaries
• Excellent knowledge of penetration testing services and techniques
• Excellent written and verbal communication skills and ability to perform working under pressure(IT Security Incidents)
• Experienced in multicultural and regional teams management and coordination
• Ability to define prioritize and execute process in a structured manner