SOC Analyst T2

• Monitor level 1 analyst performance by investigating incoming events using SOC-available tools.
  

• Ensure level 1 event(s) are addressed in a timely manner using available reporting and metrics.
  

• Approve and, if necessary, further investigate level 1-escalated events.
  

• Mentor level 1 analysts to improve detection capability within the SOC.
  

• Addresses real security incidents. Evaluates incidents identified by tier 1 analysts.
  

• Uses threat intelligence such as updated rules and indicators of compromise (IOCs) to pinpoint affected systems and the extent of the attack.
  

• Analyzes running processes and configs on affected systems.
  

• Carries out in-depth threat intelligence analysis to find the perpetrator, the type of attack, and the data or systems impacted.
  

• Creates and implements a strategy for containment and recovery.
  

• Conduct security research and intelligence gathering on emerging threats and exploits.
  

• Serve as a backup analyst for any potential coverage gaps to ensure business continuity
  

Requirements

• Proficient in Incident Management and Response.
  

• Experience in security device management and SIEM.
  

• Knowledge of security concepts such as cyber-attacks and techniques, threat vectors, risk management, incident management etc.
  

• Experience in threat management.
  

• Excellent analytical and problem solving skills;
  

• Strong interpersonal skills to interact with clients, team members and upper management;
  

• Strong collaborative skills;
  

• Windows, Linux and Cisco operating systems;
  

• NetFlow and full packet capture technology;
  

• Intrusion Detection Systems (IDS) and SIEM technologies;
  

• ArcSight ESM, Splunk, McAfee NSM, Kibana, ElasticSearch, Logstash; and
  

• Firewalls, antivirus and other similar network security tools.
  

• Windows, Linux and Cisco operating systems;
  

• NetFlow and full packet capture technology;
  

• Intrusion Detection Systems (IDS) and SIEM technologies;
  

• ArcSight ESM, Splunk, McAfee NSM, Kibana, ElasticSearch, Logstash; and
  

• Firewalls, antivirus and other similar network security tools.
  

• Min experience (3+) years