About This Role
This SOC Analyst position involves continuously monitoring security tools and systems for potential threats and incidents, reviewing event logs, and assisting in the investigation and triage of cybersecurity incidents. The role suits a candidate with proven experience in incident response and a strong understanding of network security monitoring.
Responsibilities
- Continuously monitor security tools and systems (e.g., Antivirus and firewalls) for potential threats and incidents
- Review and analyze security event logs to identify signs of malicious activity or breaches
- Assist in identifying, investigating, and triaging cybersecurity incidents (e.g., malware infections, unauthorized access, data breaches)
- Follow predefined incident response protocols and escalate issues to IT Manager or security incident response team as needed
- Conduct initial analysis on suspicious activity, including researching known threat actors, attack vectors, and tactics
- Assist in identifying indicators of compromise (IOCs) and applying them to current environments
- Assist in configuring and maintaining security tools like firewalls, antivirus software, and endpoint protection
- Ensure security tools are updated and functioning correctly, reporting any issues promptly
- Document security incidents, responses, and investigations in ticketing systems and incident management platforms
- Generate regular reports on security activities, incidents, and system health for senior staff and management
- Contribute to threat intelligence efforts by sharing relevant findings and security trends within the organization
- Stay informed about the latest cybersecurity threats and vulnerabilities to aid in proactive defense
- Work closely with network and systems administrators, as well as other security teams, to support overall security objectives
- Assist in coordinating with the IT Team to ensure timely patching and vulnerability remediation
- Support the organization
- security awareness efforts by providing insight into common attack techniques and best practices
- Assist in training end-users on how to identify phishing attempts, malware, and other cybersecurity risks
- Adhere to SOC policies and procedures for incident management, alert handling, and security best practices
- Follow a structured approach to troubleshooting and investigating security events
- Participate in cybersecurity training and certifications to enhance technical knowledge and grow within the security operations field
- Keep up with evolving cybersecurity trends, new tools, and emerging threats
Requirements
- Proven experience in an Incident Response role
