SOC Analyst

Incident Monitoring and Detection:

• Perform proactive monitoring of logs, data, link utilization, and system availability across multiple SIEMs or security tools.
• Detect and identify potential security incidents using pre-defined rules and correlation.
• Conduct blacklist scanning, keyword ingestion, and fine-tuning of SIEM rules for improved accuracy.
• Investigate and triage alerts to determine the severity and impact of security events.
• Document detailed assessments and actions taken into incident tickets.
• Escalate incidents that require further investigation or resolution to Senior Security Analyst.
• Use standardized templates as a base but proactively amend escalation emails based on current investigations and analysis without referring to past emails.
• Handle customer phone calls and respond to escalation emails.
• Prepare standardized escalation email templates for efficient communication.
• Work closely with SOC Leads, and SOC Managers to ensure incidents are effectively mitigated and resolved.
• Participate in feedback sessions and process improvement reviews to enhance workflows.

Incident Management

Customer Interaction

Collaboration and Process Improvement

Requirements:

• Basic knowledge of security tools such as SIEMs, IDS/IPS, firewalls, and antivirus systems.
• Strong attention to detail and ability to handle multiple tasks efficiently.
• Effective communication and teamwork skills to interact with internal teams and external stakeholders.
• A collaborative mindset to work effectively with other SOC tiers and managers.
• Strong analytical and problem-solving skills to address complex security challenges.
• Commitment to continuous learning to stay updated with the latest security trends and technologies.
• Adherence to SOC playbooks, standard operating procedures, and compliance requirements.
• Willingness to work on a 24/7 rotating shift schedule.