Description
The SOC Analyst is responsible for overseeing cybersecurity by monitoring, detecting, investigating, and responding to security incidents within an organization. This role is essential in safeguarding IT infrastructure, data, and users from cyber threats by utilizing security tools and protocols to maintain a strong security posture.
Responsibilities
- Monitor security events and alerts from SIEM (Security Information and Event Management) systems and other security tools.
- Analyze and investigate security incidents to determine their impact and root cause.
- Respond to security incidents, coordinate with stakeholders, and escalate as necessary.
- Conduct risk analysis to identify security gaps.
- Develop and implement incident response procedures and playbooks.
- Collaborate with IT and security teams to improve security configurations and defenses.
- Document security incidents, findings, and recommendations for future mitigation.
- Stay updated on the latest cybersecurity threats, trends, and best practices.
- Assist in threat hunting and proactive security monitoring.
- Participate in security awareness training and initiatives.
Skills and Qualifications
- Candidate must be a degree holder in Computer Science, Computer Engineering, Information Technology or equivalent qualifications.
- 1-3 years of experience in cybersecurity, SOC operations, or a similar role.
- Security certifications such as CompTIA Security+, CEH, GSEC, or equivalent.
- Familiarity with SIEM tools, IDS/IPS, firewalls, and endpoint protection solutions.
- Knowledge of cybersecurity frameworks such as NIST, MITRE ATT&CK, or ISO 27001.
- Understanding of networking protocols, operating systems, and security best practices.
- Strong analytical and problem-solving skills.
- Excellent communication and documentation abilities.
- Experience with scripting languages (Python, PowerShell, etc.) for automation.
- Knowledge of cloud security (AWS, Azure, Google Cloud).
- Familiarity with forensic analysis and malware investigation techniques.
- Rotational shifts may be required to support 24/7 security monitoring.
- Ability to work in a fast-paced and high-pressure environment.