SOC Analyst- SIEM (1-2 years of exp needed)
Summary
Level-1 SOC analyst providing 24x7 monitoring of security alerts, investigating them with SIEM tools, validating alerts with users, escalating incidents to Level-2, and documenting/tuning false positives. Suited to fresh grads or those with 1-2 years in security operations.
About the role
Provides 24x7 continuous monitoring and detection of security alerts and escalation of security incidents in aligning with the Group's business objectives and in compliance with regulatory requirements.
Key responsibilities
24x7 monitoring on IT security abnormalities or suspicious activities and closing or escalating those alerts to Level-2 analyst in timely manner
Investigate security alert using SIEM technology, report, data visualization, pattern and behavioral analysis
Reach out to respective user to validate security alert
Provide feedback on use case to Level-2 analyst for further review
Suggest tuning on false positive security alert
Document and maintain knowledge base of alarms (false positives, false negatives)
Maintain the group email address and distribution lists, answer SOC main phone lines, and update all relevant documentation such as shift logs
About you
Bachelor's degree in Computer Science, Engineering, IT Security or a related field
Fresh graduates welcome; 1-2 years of information security related experience also acceptable
2 years of information security related experience in areas such as: security operations, incident analysis, incident handling, and vulnerability management or testing, system patching, log analysis, intrusion detection, or security device administration
Exposure to security monitoring technologies, such as SIEM, IPS/IDS, UEBA, DLP, AV, among others
Knowledge of various operating systems including but not limited to Windows, Linux, Unix
Demonstrated ability to work in a team environment
Good analytical and problem-solving skills
Preferred Certifications: SANS Certification such as GSEC, CCED, GCIA, GCIH or other relevant certifications