SOC Analyst
Summary
Monitors, triages, and investigates security alerts and incidents in real time for a payments company, including malware analysis and forensic investigation, while tuning SIEM alert rules and collaborating with IT teams on remediation. Core stack includes SIEM platforms (Splunk, QRadar, LogRhythm) and Trend Micro Vision One.
A Security Operations Center (SOC) Analyst is responsible for monitoring, detecting, investigating, and responding to cybersecurity threats and incidents in real-time. This position plays a crucial role in maintaining the organization's security posture and protecting critical assets from cyber threats.
Key Responsibilities
- Monitor and analyze security alerts from various security tools, SIEM platforms, and network devices
- Perform initial triage and investigation of security incidents
- Document and track security incidents from identification through resolution
- Conduct malware analysis and forensic investigation of security events
- Maintain and tune security monitoring tools and alert rules
- Collaborate with other IT teams for incident remediation
Required Qualifications
- Bachelor's degree in Computer Science, Cybersecurity, or related field
- 2+ years of experience in information security or related IT field
- Strong understanding of network protocols, security frameworks, and common attack vectors
- Experience with SIEM platforms (e.g., Splunk, QRadar, LogRhythm)
- Experience with Trend Micro Vision One.