Soc Analyst - Remote

at Aspiree, Inc. in Metro Manila
Published at Jan 18, 2022

Job duties:

• Analyse and respond to security threats from the security event information incident management platform (includes firewall, intrusion detection systems and antivirus events)

• Dedicated monitoring and triage/analysis of cyber security events

• Maintaining and enhancing the security event information management platform to ensure availability for monitoring and managing events.

• Security authorisations and ticketing (via Service Now)

• Incident report generation and reporting

• Processing incident communications to include initial reporting, follow-ups, requests for information and resolution activity

• Manage integration of new devices to event logging solution

• Build event logging business system overlay

• Monitor SOC Portal for alerts and identify false positives

• Enrich asset model in event logging service for business criticality, system function etc

• Investigate security incidents

• Liaise with Infrastructure teams to resolve incidents

• Track incident statistics and maintain in Service Now

• Work with various technical teams to integrate global infrastructure onto event logging service.



Requirements for the role: General Skills:

• Strong ability to communicate, excellent written and oral communication skills with ability to speak authoritatively to different audiences

• Independent self-starter; strong understanding of security operations concepts; strong understanding of basic computer science applications and incident investigation/management.

• Background in security investigation, analysis and reporting.

• Requires critical thinking and problem-solving skills

Technical Skills:

• Experience in technical IT Security (essential)

• At least 2 years’ experience in a security operations centre or IT operational role (essential)

• Experience of configuring tools for security operations (essential)

• Experience of working within large scale complex IT environments in the financial industry (essential)

• Use and configuration of log management/SIEM solutions (essential)

• Incident investigation and analysis capabilities (essential)

• Incident management and coordination experience (essential)

• Use and configuration of vulnerability management and policy compliance solutions (desirable)

• Ability to identify security processes and integrate with Service management platforms (desirable)

• Vulnerability management and remediation (desirable)

• Requires experience with SIEM technologies, Linux, Windows and Network Operating

Systems

« Go back to category
Is this job ad fake? Report it!   

Published at Jan 18, 2022
Viewed: 2673 times