SOC Analyst
Posted Updated 2
views
Summary
SOC Analyst in RFA's Security Operations Center monitors SIEM and endpoint EDR data to detect and escalate malicious activity for clients, following procedures for containment and remediation and supporting the MDR infrastructure. Requires SC-200 certification and 2+ years in security/network administration.
Certification requirements = Microsoft Certified: Security Operations Analyst Associate SC200
Working shift - 9:30AM - 6:30PM PHT - Mon-Fri
As a member of the RFA Security Operations Center, a SOC Analyst monitors and analyzes the output from various security monitoring and scanning tools to detect malicious or anomalous activity on behalf of RFA clients. The SOC Analyst recommends actions per established procedures for the detection, containment, and remediation of cyber security incidents. The analyst also supports the engineering, installation, configuration, and maintenance of the RFA MDR infrastructure, as required.
Responsibilities
- Responsible for working in a 24x7 Security Operation Center (SOC) environment.
- Monitor, prioritize, correlate, analyze, and escalate security data from multiple sources including, but not limited to SIEM and endpoint EDR solutions.
- Independently follow established procedures to investigate, escalate, contain, and/or eradicate malicious activity.
- Document all activities during incident identification and provide leadership with status updates during the life cycle of an incident. Log and record all security events to internal ticketing system.
- Communicate and collaborate with the analyst team for situational awareness.
- Support network mapping and vulnerability scanning as required.
- Build and develop professional working relationships with fellow analysts.
- Assist and communicate to foster collaboration and support a team approach to operations.
- Support process improvement.
- Respond to client security related inquiries.
Qualifications
- Bachelor’s degree or equivalent level of experience.
- 2+ years' experience as a Security/Network Administrator or equivalent knowledge.
- Knowledge of various security methodologies and processes, and technical security solutions (firewall and intrusion detection systems).
- Strong communication skills.
- Able to work independently.
- Knowledge of TCP/IP Protocols, network analysis, and network/security applications.
- Knowledge of common Internet protocols and applications.
- Security+ or InfoSec security certification preferred.
Skills
As published by lever · 2 questions
Basics
Resume/CV, Full name, Email, Phone, Current location, Current company, LinkedIn URL, Other website
Pick from a list (2)
- Please confirm you are able to work this shift: 9:30AM - 6:30PM PHT - Mon-Fri optional
- Do you have the Microsoft Certification: Security Operations Analyst Associate (SC200)? optional