Title:  Cyber Security SOC - Technical Specialist-Cybersecurity

Area(s) of responsibility

Cyber Security SOC Analyst

Job Responsibilities:

• Incident and Data breach handling experience (example Ransomware, Malware attack etc.)
• Understanding and defending knowledge in Cyber Security (Ex. Blue Teaming, MITRE ATT&CK Matix, Cyber Kill Chain, NIST CSF etc.)
• Alerts identification (example identify false positive) and incident triaging
• Understanding about Security Incident Event Management (SIEM) and SOC Operations
• Monitor, detect and respond to threats in customer environments using our SOC platform
• Tune threat detection for both general and specific customer environments to minimize false positive and amplify productivity
• Understanding and implementing knowledge on EDR Platform (Ex. Crowdstrike)
• Maintain & formulate Standard Operating Procedures for SOC Security Services
• Maintain proficiency by following the latest trends and developments in cybersecurity
• Report presentation to stakeholders
• Maintain proficiency by following the latest trends and developments in cybersecurity
• Act as an escalation resource for Open Systems SOC Security Analysts who are triaging security events and observations to identify potential threats
• Create reports for customers and internal operational use on an ongoing basis
• Broaden coverage of detection by identifying opportunities to acquire, ingest and analyze Data and logs from additional sources and technologies
• Help extend malware analysis capability, execute malware triage
• Create and update documentation to support ongoing operations
• Collaborates with Security Operations Center (SOC) Analyst to monitor and analyze security alerts and events.

Experience, Skills & Qualifications

• Overall Exp: 4 -6 years
• Strong knowledge of concepts like Blue Teaming or Purple Teaming, Threat Hunting, EDR, SIEM
• Experience using EDR (Crowdstrike, Sophos etc.) and SIEM systems (Splunk, Microsoft Sentinel etc.)
• Strong understanding of security operations, process, and procedures with specific reference to incident response and threat intelligence
• Able to work collaboratively on a global basis and help build team capability
• Familiarity with common and latest forms of malware, attacker tools, and techniques
• Strong awareness of the current global threat landscape
• Hands-on experience installing, configuring, or tuning some or all of the following security technologies: Cyber Security Analytics, Secure web gateways/web proxy, endpoint protection (EPP/AV/HIDS), endpoint detection and response solutions (EDR example Crowdstrike Falcon), DLP/FIM, SSL Certificate Manager and VPN/encryption.
• Azure Security/ AWS Security certifications are added advantages