Cyber Security Operations & Analyst
- Perform Level 2 (L2) Security Operations activities and investigate security alerts and incidents escalated by the Level 1 (L1) team.
- Analyze security alerts, suspicious activities, and Indicators of Compromise (IoCs) to identify potential security threats.
- Conduct threat hunting activities to identify potential threats and unusual activities within the security environment.
- Support Cyber Threat Intelligence (CTI) activities by assessing identified threats and their potential impact on the organization's environment.
- Monitor, maintain, and troubleshoot existing security monitoring and protection tools to ensure their availability and operational effectiveness.
- Support security log integration and ensure relevant security events are properly collected and monitored.
- Assist in Proof of Concept (PoC) activities, evaluation, and implementation of new security tools.
- Perform preventive maintenance and troubleshoot operational issues related to security tools and monitoring systems.
- Prepare and maintain Security Operations documentation, procedures, operational guidelines, and reports.
- Collaborate with security, infrastructure, and application teams to investigate and resolve security-related issues.
-
Bachelor's degree in Information Technology, Computer Science, Cybersecurity, or a related field.
-
1–2 years of experience in Cyber Security, Security Operations Center (SOC), or a related security role.
-
Basic understanding of security monitoring, incident investigation, incident response, and security operations processes.
-
Hands-on experience in analyzing security alerts, investigating suspicious activities, and handling security incidents.
-
Familiarity with threat hunting, Cyber Threat Intelligence (CTI), Indicators of Compromise (IoCs), and security log analysis.
-
Basic knowledge of SIEM, EDR/XDR, endpoint security, vulnerability assessment, or cloud security.
-
Familiarity with security tools such as Elastic, Elastic Defend, Microsoft Defender, Cortex XDR, Nessus, Forcepoint, Orca Security, SocRadar, SenhaSegura, Tencent, or similar platforms is an advantage.
-
Strong analytical thinking, problem-solving, and troubleshooting skills.
-
Good communication skills and the ability to collaborate effectively with cross-functional teams.
-
Willingness to learn new security technologies and continuously improve technical capabilities.