Qureos Mentor

Hubkom

Summary of Job Profile:The SOC L2 Analyst plays a critical role in the proactive defense of the organization's security posture. This individual will leverage their technical expertise and analytical skills to investigate complex security incidents, identify attack patterns, and implement effective countermeasures. The SOC L2 Analyst serves as an escalation point for Tier 1 analysts and contributes to the continuous improvement of SOC processes and security tools.Essential Duties &amp; Responsibilities<ul><li>Monitor security events and alerts generated by various security tools (e.g., SIEM, IDS/IPS, EDR) and escalate complex or high-severity incidents as necessary.</li><li>Conduct in-depth analysis of security incidents to determine root cause, scope, and impact.</li><li>Perform threat hunting activities to proactively identify potential security threats that may evade automated detection.</li><li>Implement containment and remediation strategies for security incidents, including isolating affected systems, blocking malicious traffic, and removing malware.</li><li>Analyze malware samples and understand their behavior.</li><li>Develop and refine security incident response procedures and playbooks.</li><li>Collaborate with Tier 1 analysts, providing guidance and support in incident analysis and handling.</li><li>Escalate incidents to Tier 3 analysts or other relevant teams (e.g., IR, Engineering) when necessary.</li><li>Document all incident analysis, containment, and remediation activities in detail.</li><li>Contribute to the tuning and optimization of security tools and alerting rules.</li><li>Stay up-to-date on the latest cyber threats, attack techniques, and security vulnerabilities, potentially considering threat trends.</li><li>Participate in post-incident reviews to identify lessons learned and improve incident response processes.</li><li>Assist in the development and delivery of security awareness training materials.</li></ul>RequirementsKnowledge, Skills, Abilities (KSA&rsquo;s) required to successfully perform the job:Knowledge<ul><li>Strong understanding of TCP/IP and other networking protocols.</li><li>In-depth knowledge of common cyber threats, attack vectors, and malware types.</li><li>Familiarity with various security tools and technologies (e.g., SIEM, IDS/IPS, EDR, firewalls, web proxies).</li><li>Understanding of operating system security (Windows, Linux).</li><li>Knowledge of security event analysis and correlation techniques.</li><li>Knowledge of incident response processes and methodologies.</li><li>Awareness of relevant security regulations and compliance standards.</li><li>Understanding of threat intelligence sources and their application.</li></ul>Skills<ul><li>Proficient in analyzing security logs and identifying malicious activity.</li><li>Strong understanding of network traffic analysis.</li><li>Ability to perform basic malware analysis.</li><li>Skill in using various security tools for incident investigation and response.</li><li>Good understanding of scripting languages (e.g., Python, PowerShell) for automation.</li><li>Ability to work effectively under pressure during security incidents</li></ul>Abilities<ul><li>Ability to analyze complex security events and identify root causes.</li><li>Ability to implement effective containment and remediation strategies.</li><li>Ability to correlate data from various security tools to gain a comprehensive understanding of incidents.</li><li>Ability to document security incidents clearly and concisely.</li><li>Ability to learn and adapt to new security threats and technologies.</li><li>Ability to work independently and as part of a team.</li><li>Ability to follow established procedures and guidelines</li></ul>Education, Experience, Licensure, Certification Required For The Position<ul><li>Bachelor's degree in Computer Science, Information Security, or a related field.</li><li>1-3 years of experience in a Security Operations Center (SOC) environment, with demonstrable experience in incident analysis and response</li><li>Relevant security certifications such as CompTIA CySA+, Security+, CEH, or vendor-specific certifications (e.g., Splunk Core Certified User/Power User) are desirable.</li></ul>Competencies Required To Successfully Perform The JobTechnical CompetenciesBehavioural/General Competencies<ul><li>SIEM Analysis &amp; Management</li><li>Basic Malware Analysis</li><li>Scripting for Automation (e.g., Python, PowerShell)</li><li>Network Traffic Analysis</li><li>Endpoint Detection &amp; Response (EDR) Analysis</li><li>Analytical Thinking</li><li>Problem Solving</li><li>Communication (verbal and written)</li><li>Attention to Detail</li><li>Responsible</li></ul>Job Type: Full-timeWork Location: In person

SOC Officer

Join Hubkom and explore 1   exciting career opportunities. They're hiring for various roles with options for remote or on-site work. Apply today and become part of their innovative team.

Hubkom

About Company

SOC Officer