SOC Analyst

Job Description:

• Handle Escalated incident tickets from L1 Team.
• Analyse and investigate security events from various sources; Triage security events and incidents, detect anomalies, and report remediation actions.
• Manage security incidents through all phases of the incident response process through to

Closure

• Using SIEM, Full Packet Capture, Intrusion Detection, Vulnerability Scanning and Malware analysis technologies for even detection and analysis.
• Developing knowledge of attack types and fine tuning detective capabilities such as writing

Vendor signatures.

• Identifying log sources and examining system logs, which should record sufficient details about the normal activities of the system to allow a history of events to be reconstructed, making use of appropriate forensic techniques and technologies;
• Triage on general information security tickets.
• Undertake computer forensic investigations. Such as examining running processes, identify

network connections on a host, examining log data, disk imaging and memory capture;

• Work in shift based on the shift roster.

Maintain and support the operational integrity of SOC toolsets