SOC L1 Analyst

• Alert Log Analysis: Ability to work on log and alert analyses based on the security alerts generated by the SIEM system.
• Correlation: Ability to correlate multiple alerts to connect the dots and detect an overall threat pattern.
• SLA Reporting: Ability to work as per defined SLAs and generate SIEM reports according to business requirements.
• Daily Investigation: Assist in investigating security logs across various sources including Network traffic, Firewalls, IPS, WAF, Endpoints, O365, Cloud and Databases.
• Incident Analysis: Experience performing analysis of phishing incidents, malware incidents, CC traffic, signature triggers, firewall logs etc.
• Framework Knowledge: Understanding of the MITRE ATTCK framework and Cyber Kill Chain framework.
• Foundations: Basic but strong understanding of networking, firewalls, Linux environments, security policies, vulnerabilities, and Indicators of Compromise (IoCs).
• Use Case Support: Previous experience or interest in assisting with the creation of detection rules/use cases in a SIEM.
• Proactive Support: Familiarity with basic threat hunting techniques to look for anomalies in the environment.

Experience Qualification

• Experience: 1 3 years of experience working in a Security Operations Center (SOC) with a primary focus on log analysis, incident management, incident reporting, and Root Cause Analysis (RCA).
• Availability: Readiness to work in 24/7 rotational shifts.
• Desired Certification (Any one): Blue Team Level 1 (BTL1) Certified Ethical Hacker (CEH)

Disclaimer: This job posting has been aggregated from external source. Role details, content, and availability are subject to change. Applicants are advised to confirm the latest information directly on the company website before applying.