SOC Analyst Engineer

About the role

The SOC Analyst is responsible for detecting security incidents in the SOC and translating their impact into business terms. The role monitors security controls, reviews incident tickets and uses emerging threat intelligence to identify affected systems and the scope of the attack.

Key responsibilities

• Gather, analyse and communicate threat intelligence through the intelligence lifecycle
• Analyse files and related components using technical tools and technologies
• Perform in-depth analysis of incidents created by the L1 team
• Understand the behaviour and implications of incidents on computers and networks
• Respond to customer queries and concerns within the agreed timeline
• Determine and direct remediation and recovery efforts
• Review vulnerability scan results and vulnerability assessment reports
• Manage, configure and improve security monitoring tools such as SIEM, according to client needs
• Promote a professional image of the company and its professional services function

Required profile

• Bachelor's degree in Computer Science or a related field
• At least 2 years of relevant experience
• At least one security certificate (e.g. CEH, OSCP, CISSP, CCNP Sec)
• Any CCNP or equivalent certification
• Any non-vendor security certificate (e.g. CISSP, CISM, ISO27001, GCIA, GCIH, GCFA, GCFE)

Required skills

• Log formats (LEEF, CIF) and protocols (syslog, FTP, logfile)
• Security devices: IDS/IPS, HIDS/HIPS, anomaly detection, firewall and antivirus
• Network forensics: traffic protocols, traffic analysis, network flows and PCAP
• Working knowledge of SIEM tools such as RSA, ArcSight, Splunk and QRadar