security operations center (soc) analyst

Trend Micro Inc.

<div><div>When you join Trend, you become part of a unique and diverse global family and you get to work towards a world safe for exchanging digital information.</div><div>
ABOUT TREND MICRO</div><div>
Trend Micro, a global cybersecurity leader, helps make the world safe for exchanging digital information. Fueled by decades of security expertise, global threat research, and continuous innovation, Trend Micro's cybersecurity platform protects hundreds of thousands of organizations and millions of individuals across clouds, networks, devices, and endpoints. As a leader in cloud and enterprise cybersecurity, the platform delivers a powerful range of advanced threat defense techniques optimized for environments like AWS, Microsoft, and Google, and central visibility for better, faster detection and response. With 7,000 employees across 65 countries, Trend Micro enables organizations to simplify and secure their connected world. For additional information, visit <div>www.trendmicro.com</div></div><div></div><div>
POSITION OVERVIEW</div><div>
The Incident Response Analyst serves as the primary technical responder to active security incidents, interfacing with the Security Operations Center (SOC) and IT infrastructure teams, ensuring the effective containment, eradication, and recovery from cyber threats through rapid forensic analysis and technical mitigation.</div><div></div><div>
PRIMARY RESPONSIBILITIES</div><ul><li>
Oversee all incident response activities reported from detection to incident resolution.</li><li>
Serve as a contact point for suspicious and malicious events escalated by technical support cases, and from the Trend Micro threat hunting efforts and Incident Response Operations.</li><li>
Collect and preserve digital evidence for analysis using traditional DFIR and XDR methods.</li><li>
Analyze different digital forensic artifacts, network traffic, security events to perform root cause analysis and summarize all investigations and conclusions in an incident report.</li><li>
Differentiate between potential intrusion attempts and false alarms, evaluating unknown or suspicious activity and consulting on measures to mitigate their impact on availability and productivity.</li><li>
Review and analyze technical components of malware and other related threat activities in security-related events and different data sources to develop and refine detection criteria and generate threat intelligence.</li><li>
Compose security alert notifications and other communications.</li><li>
Stay up to date with current vulnerabilities, attacks, and countermeasures.</li><li>
Explain different threats to both technical and non-technical parties who do not necessarily have relevant backgrounds and provide consultancy on how to improve security posture to prevent relative threats.</li><li>
Threat Hunting in Telemetry for hidden, dormant threats, or potentially escalating threats</li><li>
Contribution in Detection Engineering in TM products based on Incident Reports or OSINT</li><li>
Occasional evening and weekend shifts may be required.</li></ul><div></div><div>
REQUIRED EXPERIENCE</div><ul><li>
A degree in a related field such as Digital Forensics, security, computer engineering, computer science, Telecommunication/Electronics engineering, Information Technology or equivalent professional certifications preferably GIAC/SANS (GEIR, GX-FA, and/or GCFA are a clear advantage)</li><li>
Eligible to work in Egypt and is ready to be resident in Cairo (or around it). Role is hybrid; employees may be asked to constantly work from the office a few days per week.</li><li>
3+ year experience in a full-time security position involving threat hunting, detection, Digital Forensic investigation and response.</li><li>
Sufficient knowledge of different security controls</li><li>
Sufficient Knowledge of common enterprise&rsquo;s IT infrastructure (Network and several types of OS)</li><li>
Sufficient knowledge on adversary Tactics, Techniques, and procedures and ability to map them to threat modeling frameworks</li><li>
Experience with log analysis, event correlation and incident management procedures and systems, and knowledge of host and network log sources.</li><li>
Experience with host-based digital forensics and threat hunting.</li><li>
Aptitude for learning, self-directed, and working in critical incidents.</li><li>
Must have a powerful sense of duty, diligent in investigation.</li><li>
Ease of communication to internal and external stakeholders in English and Arabic. Communication may include reports, presentations, verbal instant updates, or other forms of communication</li></ul><div></div><div>
PREFERRED EXPERIENCE</div><ul><li>
Total 5+ years of experience in a Cybersecurity/IT/technology relevant role in a structured environment</li><li>
Experience in a comparable vendor or a security service provider</li><li>
Experience in different types of cybersecurity related assessments</li><li>
Malware analysis and threat detection engineering</li><li>
Scripting capability</li><li>
Demonstrated knowledge of Offensive security</li><li>
Experience of Security architecture/controls</li><li>
Familiarity with Trend Micro products and technology</li><li>
A third language proficiency</li><li>
Customer/Executive interfacing experience</li></ul><div></div><div>
Trend Micro strive to build an environment of equity and inclusion, which reflects diverse points of view. We welcome, value, promote, and celebrate diversity - the very experiences and attributes that make us who we are, including but not limited to race, ethnicity, nationality, gender, gender identification, sexual orientation, level of ability, age, religion, veteran status, socio-economic status, and political philosophy.</div><div></div><div>
#LI-Onsite</div><div>
#LI-NA1</div><div></div><div>
We embrace change, empower people, and encourage innovation. Join Trend Micro and Thrive with us.</div></div>

Incident Response Analyst

Hepsiburada (NASDAQ: HEPS)

<div>
 <p>
  At Hepsiburada, we are driven by our mission to improve people's lives by developing innovative products and services. Prioritizing customer satisfaction, we offer over 280 million products across more than 30 categories. Through our marketplace model, we bring together over 100,000 businesses. With T&uuml;rkiye&rsquo;s and the region's largest Smart Operations Center, industry-leading R&amp;D initiatives, and innovative solutions, we contribute significantly to the growth of the e-commerce ecosystem. For the past two years, we have proudly held the title of Turkey's most recommended e-commerce platform.
 </p>
 <p>
  <br/>
 </p>
 <p>
  Through our innovative services like HepsiJET, Hepsipay, HepsiLojistik, HepsiAd, and Hepsiburada Global, we create value for all our stakeholders. Committed to harnessing technology for social benefit, our &ldquo;Technology Empowerment for Women Entrepreneurs&rdquo; program has connected thousands of women entrepreneurs with e-commerce, supporting their growth. Our goal is to leverage digitalization and e-commerce to enable greater economic participation.
 </p>
 <p>
  <br/>
 </p>
 <p>
  With 25 years of experience driven by innovation and entrepreneurship, we proudly continue our journey as &ldquo;T&uuml;rkiye&rsquo;s Hepsiburada&rdquo; and the first and only Turkish company listed on NASDAQ, the world's leading technology exchange.
 </p>
 <p>
  <br/>
 </p>
 <p>
  For our colleagues, we offer a work environment that supports creating together and adding more meaning to our work. As a team full of opportunities, we are happy to develop, produce and succeed together.
 </p>
 <p>
  <br/>
 </p>
 <p>
  If you want to be part of a team that creates value for everyone and makes life easier through innovative products and services&mdash;and contribute to exciting success stories&mdash;the future starts here.
 </p>
 <p>
  <br/>
 </p>
 <p>
  <strong>
   <u>
    Requirements:
   </u>
  </strong>
 </p>
 <p>
  <br/>
 </p>
 <ul>
  <li>
   Installing, maintaining, and monitoring SIEM and SOAR platforms,
  </li>
  <li>
   Designing and enhancing Cyber Security Monitoring and Automation Infrastructure,
  </li>
  <li>
   Developing, tuning, and optimizing SIEM correlation rules, detection use cases, and automation playbooks,
  </li>
  <li>
   Integrating SIEM &amp; SOAR with Threat Intelligence, EDR, Cloud Security, and other security tools,
  </li>
  <li>
   Managing log source onboarding, parsing, and normalization (e.g., CIM, data models, field extractions),
  </li>
  <li>
   Automating SOC processes and designing SOAR workflows to improve efficiency and accuracy of alert handling, and integrating them with ticketing systems (e.g., ServiceNow, JIRA),
  </li>
  <li>
   Documenting processes, playbooks, and standard operating procedures,
  </li>
  <li>
   Ensuring scalability, performance, and health monitoring of SIEM environments.
  </li>
 </ul>
 <p>
  <br/>
 </p>
 <p>
  <strong>
   <u>
    Qualifications:
   </u>
  </strong>
 </p>
 <p>
  <br/>
 </p>
 <ul>
  <li>
   Bachelor&rsquo;s degree or equivalent experience in Computer Science, Engineering, or related field,
  </li>
  <li>
   2+ years of hands-on experience with SIEM &amp; SOAR platforms (Splunk and XSOAR experience highly preferred),
  </li>
  <li>
   Experience integrating SIEM/SOAR with multiple security technologies (EDR, FW, IDS/IPS, Cloud Security),
  </li>
  <li>
   Knowledge of cyber security frameworks such as MITRE ATT&amp;CK, NIST CSF, etc.,
  </li>
  <li>
   Experience with scripting languages (Python, PowerShell, etc.) for automation and integration,
  </li>
  <li>
   Proficiency in both Linux and Windows operating systems,
  </li>
  <li>
   Strong knowledge of core security concepts (access management, hardening, monitoring, etc.),
  </li>
  <li>
   Experience with log pipeline management and parsing (Regex, KQL, SPL),
  </li>
  <li>
   Experience with data enrichment, threat feed integration, and use of APIs in automation,
  </li>
  <li>
   Proactive, eager to learn, and open to new ideas,
  </li>
  <li>
   Team player with the ability to mentor and take initiative,
  </li>
  <li>
   Relevant certifications (Splunk Certified Admin/Architect, Palo Alto XSOAR, GIAC GCDA) are a plus.
  </li>
 </ul>
 <p>
 </p>
</div>


Cyber Security Engineer

Deloitte

<div></div><div><div><div><div><div>Job requisition ID :: 89960
</div></div></div></div><div><div><div><div>Date: Oct 24, 2025
</div></div></div></div><div><div><div><div>Location: Mumbai
</div></div></div></div><div><div><div><div>Designation: Assistant Manager
</div></div></div></div><div><div><div><div>Entity: Deloitte Touche Tohmatsu India LLP
</div></div></div></div><div><div><div><div><div><b>Your potential, unleashed.</b></div><br>
<div></div>
<div>
India&rsquo;s impact on the global economy has increased at an exponential rate and Deloitte presents an opportunity to unleash and realize your potential amongst cutting edge leaders, and organizations shaping the future of the region, and indeed, the world beyond.</div><br>
<div></div>
<div>
At Deloitte, your whole self to work, every day. Combine that with our drive to propel with purpose and you have the perfect playground to collaborate, innovate, grow, and make an impact that matters.</div><br>
<div></div>
<div><b>
The team</b></div><br>
<div>
Deloitte helps organizations prevent cyberattacks and protect valuable assets. We believe in being secure, vigilant, and resilient&mdash;not only by looking at how to prevent and respond to attacks, but at how to manage cyber risk in a way that allows you to unleash new opportunities. Embed cyber risk at the start of strategy development for more effective management of information and technology risks</div><div><br>
<b>
Your work profile</b></div><br>
<div></div>
<div>
As a Consultant in our <b>Cyber</b> Team, you&rsquo;ll build and nurture positive working relationships with teams and clients with the intention to exceed client expectations: -</div><br>
<p></p>
<p><b>
Requirement Specification
</b></p><ul><li>Bachelor&rsquo;s degree in computer science/ electrical electronics, Information Security, Engineering, or a related field.</li>
<li>2 to 4 years of experience in cybersecurity, with a focus on OT security operations.</li>
<li>Strong understanding of OT systems, including <b>SCADA, DCS, PLC</b>, and other industrial control systems.</li>
<li>Experience with security monitoring tools, <b>Claroty, Nozomi, Tenable, CrowdStrike EDR, SIEM</b> platforms, and incident response procedures.</li>
<li>Excellent client-facing skills with the ability to communicate complex technical concepts to non-technical stakeholders.</li>
<li>Relevant certifications such as <b>GICSP, CISSP, CISM</b>, or similar are preferred.</li>
<li>Strong problem-solving skills and the ability to work under pressure during security incidents.</li>
<li>Excellent written and verbal communication skills.</li>
</ul>
<p><b>Key Responsibilities:</b></p>
<ul>
<li>Client Engagement:</li>
<li>Serve as the primary point of contact for clients regarding OT SOC services.</li>
<li>Conduct regular meetings with clients to discuss security posture, incidents, and recommendations.</li>
<li>Develop and maintain strong client relationships to ensure satisfaction and trust in our services.</li>
<li>Security Operations:</li>
<li>Monitor and analyze security events from OT environments to identify potential threats and vulnerabilities.</li>
<li>Perform real-time security monitoring and incident response for OT systems.</li>
<li>Utilize security information and event management (SIEM) tools to detect and respond to security incidents.</li>
<li>Incident Management:</li>
<li>Lead and coordinate the response to OT security incidents, including investigation, containment, eradication, and recovery.</li>
<li>Conduct root cause analysis and develop remediation plans to address security gaps.</li>
<li>Prepare detailed incident reports and deliver findings to clients in a clear and professional manner.</li>
<li>Threat Intelligence and <b>Vulnerability Management</b>:</li>
<li>Gather and analyze threat intelligence relevant to OT environments.</li>
<li>Conduct vulnerability assessments and penetration testing on OT systems.</li>
<li>Develop and implement strategies to mitigate identified vulnerabilities and enhance security controls.</li>
<li>Collaboration and Training:</li>
<li>Work closely with internal teams, including IT SOC, engineering, and risk management, to ensure comprehensive security coverage.</li>
<li>Provide training and guidance to clients and internal teams on OT security best practices.</li>
<li>Stay updated with the latest trends, technologies, and threats in OT security.</li><br>
</ul>
<p></p><p><b>Desired qualifications</b></p>
<ul>
<li>Ability to define the business &amp; technical scope of a project. Should be able to independently lead delivery teams to deliver projects according to client specifications after such scope is defined</li>
<li>B.E / B.Tech (Tier 1/2) in Computer Science, Information Technology or related fields</li>
<li>Good to have cloud certifications</li>
</ul>
<div><b>Location and way of working</b></div>
<ul>
<li>Base location: Bangalore, Hyderabad, Mumbai, Pune, &amp; Delhi</li>
<li>Professionals are required to work from office.</li></ul><br>
<p></p>
<p><b>
Your role as a consultant</b></p><br>
<div><b>
</b></div><div>We expect our people to embrace and live our purpose by challenging themselves to identify issues that are most important for our clients, our people, and for society.</div><br>
<div>
</div><div>In addition to living our purpose, Consultant across our organization must strive to be:</div><br>
<p>
</p><ul><li>Inspiring - Leading with integrity to build inclusion and motivation
</li><li>Committed to creating purpose - Creating a sense of vision and purpose
</li><li>Agile - Achieving high-quality results through collaboration and Team unity
</li><li>Skilled at building diverse capability - Developing diverse capabilities for the future
</li><li>Persuasive / Influencing - Persuading and influencing stakeholders
</li><li>Collaborating - Partnering to build new solutions
</li><li>Delivering value - Showing commercial acumen
</li><li>Committed to expanding business - Leveraging new business opportunities
</li><li>Analytical Acumen - Leveraging data to recommend impactful approach and solutions through the power of analysis and visualization
</li><li>Effective communication &ndash; Must be well abled to have well-structured and well-articulated conversations to achieve win-win possibilities
</li><li>Engagement Management / Delivery Excellence - Effectively managing engagement(s) to ensure timely and proactive execution as well as course correction for the success of engagement(s)
</li><li>Managing change - Responding to changing environment with resilience
</li><li>Managing Quality &amp; Risk - Delivering high quality results and mitigating risks with utmost integrity and precision
</li><li>Strategic Thinking &amp; Problem Solving - Applying strategic mindset to solve business issues and complex problems
</li><li>Tech Savvy - Leveraging ethical technology practices to deliver high impact for clients and for Deloitte.
</li><li>Empathetic leadership and inclusivity - creating a safe and thriving environment where everyone's valued for who they are, use empathy to understand others to adapt our behaviours and attitudes to become more inclusive.</li><br>
</ul>
<div></div><div><b>How you&rsquo;ll grow</b></div><br>
<div></div>
<h1 class="jobSectionHeader"><b><i>
Connect for impact</i></b></h1><br>
<div><b>
</b></div><div>Our exceptional team of professionals across the globe are solving some of the world&rsquo;s most complex business problems, as well as directly supporting our communities, the planet, and each other. Know more in our Global Impact Report and our India Impact Report.</div><br>
<div></div>
<h1 class="jobSectionHeader"><b><i>
Empower to lead</i></b></h1><br>
<div><b>
</b></div><div>You can be a leader irrespective of your career level. Our colleagues are characterised by their ability to inspire, support, and provide opportunities for people to deliver their best and grow both as professionals and human beings. Know more about Deloitte and our One Young World partnership.</div><br>
<div></div>
<h1 class="jobSectionHeader"><b><i>
Inclusion for all</i></b></h1><br>
<div><b><i>
</i></b></div><div>At Deloitte, people are valued and respected for who they are and are trusted to add value to their clients, teams and communities in a way that reflects their own unique capabilities. Know more about everyday steps that you can take to be more inclusive. At Deloitte, we believe in the unique skills, attitude and potential each and every one of us brings to the table to make an impact that matters.</div><br>
<div></div>
<h1 class="jobSectionHeader"><b><i>
Drive your career</i></b></h1><br>
<div><b><i>
</i></b></div><div>At Deloitte, you are encouraged to take ownership of your career. We recognise there is no one size fits all career path, and global, cross-business mobility and up / re-skilling are all within the range of possibilities to shape a unique and fulfilling career. Know more about Life at Deloitte.</div><br>
<div></div>
<div><b>
Everyone&rsquo;s welcome&hellip; entrust your happiness to us</b></div><br>
<div></div>
<div>
Our workspaces and initiatives are geared towards your 360-degree happiness. This includes specific needs you may have in terms of accessibility, flexibility, safety and security, and caregiving. Here&rsquo;s a glimpse of things that are in store for you.</div><br>
<div></div>
<div><b>
Interview tips</b></div><br>
<div></div>
<div>
We want job seekers exploring opportunities at Deloitte to feel prepared, confident and comfortable. To help you with your interview, we suggest that you do your research, know some background about the organisation and the business area you&rsquo;re applying to. Check out recruiting tips from Deloitte professionals.</div><br>
<p>
</p><p>*Caution against fraudulent job offers*: We would like to advise career aspirants to exercise caution against fraudulent job offers or unscrupulous practices.</p>
<p>
At Deloitte, ethics and integrity are fundamental and not negotiable. We do not charge any fee or seek any deposits, advance, or money from any career aspirant in relation to our recruitment process. We have not authorized any party or person to collect any money from career aspirants in any form whatsoever for promises of getting jobs in Deloitte or for being considered against roles in Deloitte. We follow a professional recruitment process, provide a fair opportunity to eligible applicants and consider candidates only on merit. No one other than an authorized official of Deloitte is permitted to offer or confirm any job offer from Deloitte. We advise career aspirants to exercise caution.</p>
<p>
In this regard, you may refer to a more detailed advisory given on our website at: https://www2.deloitte.com/in/en/careers/advisory-for-career-aspirants.html?icid=wn_</p></div></div></div></div></div><p></p>

T&T | Cyber - ES | Consultant | OT Security

Eventus Security Pvt. Ltd

<p>We are seeking a <b>dynamic and experienced cybersecurity professional</b> to join our <b>Security Operations Center (SOC)</b> team. If you're a <b>Saudi national</b> passionate about cybersecurity, incident response, and threat intelligence, this is your opportunity to make a national impact.</p><p><b>Location</b>: Saudi Arabia<br/><b>Position</b>: Senior Security Analyst<br/><b>Preference</b>: Saudi nationals<br/><b>Department</b>: Security Operations Center (SOC)</p><p><b>Key Responsibilities</b></p><ul><li>Monitor and analyze security technologies such as IDS/IPS, Firewalls, VPNs, and Switches.</li><li>Investigate and respond to security incidents using <b>SIEM</b> and <b>XDR</b> tools.</li><li>Develop and implement incident response procedures within defined SLAs.</li><li>Perform <b>threat hunting</b>, forensic log analysis, and generate quality security reports.</li><li>Work closely with internal teams and clients to resolve and document incidents.</li><li>Mentor junior analysts and contribute to team knowledge-sharing.</li><li>Create and maintain technical documentation and threat intelligence reports.</li><li>Develop <b>SIEM content</b>, drive <b>automation (SOAR)</b>, and contribute to continuous improvement.</li><li>Engage in <b>on-site incident response</b> activities when needed.</li></ul><p><b>Qualifications &amp; Skills</b></p><ul><li>Minimum <b>4+ years</b> of cybersecurity experience.</li><li>Bachelor&rsquo;s or Master&rsquo;s degree in Cybersecurity, IT Security, or a related field.</li><li>Hands-on experience with <b>XDR</b>, SIEM platforms (Splunk, ArcSight, QRadar, LogRhythm), and incident handling.</li><li>Strong understanding of <b>MITRE ATT&amp;CK</b>, Cyber Kill Chain, and network protocols (TCP/IP).</li><li>Preferred certifications: <b>OSCP, CISSP, CCIE, GCIH, GCIA</b>, etc.</li><li>Ability to analyze and interpret logs from various system and security sources.</li><li>Fluent in <b>English</b>; <b>Arabic</b> is a plus.</li><li>Strong communication, leadership, and mentoring abilities.</li></ul><p><b>Why Join Us?</b></p><ul><li>Be a part of a <b>critical national SOC team</b> protecting vital infrastructure and enterprise networks.</li><li>Work with advanced threat detection tools and contribute to <b>real-time security defense</b>.</li><li>Collaborate with top-tier cybersecurity professionals and grow in a <b>high-impact environment</b>.</li></ul><p><b>Interested candidates (Saudis preferred)</b> can <b>apply now</b> or send their CV to <b>[alisha.mulla@eventussecurity.com]</b> with the subject line:</p><p><b>Application &ndash; Senior Security Analyst &ndash; Saudi Arabia</b></p><p>Job Type: Full-time</p><p>Pay: From &#65020;5,000.00 per month</p><p>Application Question(s):</p><ul><li>Current Salary per month in SAR</li><li>Expected Salary per month in SAR</li><li>Nationality</li><li>Notice Period</li><li>Current Location</li></ul><p>Experience:</p><ul><li>SOC: 3 years (Required)</li></ul><p>Location:</p><ul><li>Jeddah (Required)</li></ul>

Senior Security Analyst

i4 Solutions

<div>
 Date: Oct 2, 2025
 <br/>
 <br/>
 Location:
 <br/>
 <br/>
 Doha, QA
 <br/>
 <br/>
 Company: i4 Solutions W.L.L
 <br/>
 <br/>
 Req ID: 2273
 <br/>
 <br/>
 <strong>
  Job Title
  <br/>
  <br/>
 </strong>
 SOC Analyst
 <br/>
 <br/>
 <strong>
  Job Scope
  <br/>
  <br/>
 </strong>
 The SOC analyst will monitor and fight threats on behalf of our client's IT infrastructure, and to assess security systems and measures for weaknesses and possible improvements. The SOC analyst is responsible for ensuring the protection of digital assets from unauthorized access, both online (cloud) and on premise for our client's networks against cybersecurity threats such as hackers, Cyber-terrorists and malware that can steal or corrupt sensitive customer data.
 <br/>
 <br/>
 <strong>
  Main Duties And Responsibilities
  <br/>
  <br/>
 </strong>
 Technical and Operations
 <br/>
 <br/>
 <ul>
  <li>
   Identify, secure, and weed out the threats as front-line defense personnel
  </li>
  <li>
   Monitor, manage, and configure security tools, review incidents to assess their urgency, and escalate incidents if necessary
  </li>
  <li>
   Operate as an incident responder (Tier 2), remediating serious attacks, assessing the scope of the attack and affected systems, and collecting data for further analysis
  </li>
  <li>
   Analyze a breach within our client's environment to reach the root cause and remediation steps to limit risk
  </li>
  <li>
   Generate security reports for our clients, that serve as an input to evaluate the efficacy of the security policies
  </li>
  <li>
   Advise on what our clients should implement as part of the necessary changes required to counter the attack or improvise security standards
  </li>
  <li>
   Act as first line of defense as part of our managed security services for our clients to document incidents and contribute to incident response and disaster recovery plans if required
   <br/>
   <br/>
   <br/>
  </li>
 </ul>
 Talent Development
 <br/>
 <br/>
 <ul>
  <li>
   Lead and coach the team cultivating empowerment and ownership
  </li>
  <li>
   Develop capabilities and secure a solid succession plan
  </li>
  <li>
   Conduct regular performance reviews, identify training needs and oversee development plans
   <br/>
   <br/>
   <br/>
  </li>
 </ul>
 <strong>
  Position Requirements
  <br/>
  <br/>
 </strong>
 <strong>
  Education
  <br/>
  <br/>
 </strong>
 Bachelor&rsquo;s degree in Information Technology, Computer Science or any other related field
 <br/>
 <br/>
 <strong>
  Experience
  <br/>
  <br/>
 </strong>
 At least 3 years in a Security Operations Center (SOC) related to MSS environment
 <br/>
 <br/>
</div>


SOC Analyst

KiZAN Technologies

<div><div><b>SOC Analyst - Level II</b></div>
<div><b>Location: Cincinnati, OH or Remote</b></div>
<div><b>Employment Type: Full-Time</b></div><br>
<div></div>
<div><b>**KiZAN is open to remote candidates for this position. </b><b>Candidates must be US based and able to work the majority of their time in EST.</b></div><br>
<div></div>
<div><b>About KiZAN:</b></div>
<div>We make technology personal!<br>
</div><div>KiZAN is an Industry leading Microsoft Professional Services and Managed Services Provider supporting Regional, National and Global clients. We personalize technology by sparking passion, fueling purpose, and building connections.</div><br>
<div></div>
<div>Here at KiZAN, we are one team, we support each other and take the initiative to solve problems. We are fully committed to the direction chosen and always support our mission. Being a part of KiZAN means that we win together, we create an inclusive atmosphere where everyone feels accepted, a sense of purpose, and we embrace collaboration.</div><br>
<div></div>
<div><p><b>OVERVIEW</b></p>
<p>A Level 2 Analyst is a subject matter expert responsible for managing threats, disseminating information, and handling, responding to and investigating all incident escalations from the Security Operations Center. Level 2 team members are responsible for coordinating with the CSIRT process when necessary and managing incidents throughout the event life cycle. Level 2 team members will further an investigation and ensure root cause and resolution for metrics, tracking, and lessons learned are compiled, documented, and disseminated in conjunction with the CIRT process.</p>
<p>They will provide insight and expertise to examine malicious code (malware), attack vectors, network communication methods, analyze threats against target systems and networks, determine target network capabilities and vulnerabilities, support development and maintenance of new tools and techniques to exploit specific targets, and produce technical after-action reports in support of the SOC. Level 2 members will be the focal point for critical security Alert, Events, and Incidents and will serve as subject matter experts in providing recommendations to the SOC Incident Manager and other members of Information Security and IT management for escalation and remediation. Level 2 Analysts are also responsible for training and mentoring their Level 2 and Level 1 peers to improve SOC Analyst capability. Finally, Level 2 members will work with the SIEM/SOAR Engineers to develop and refine use cases within Microsoft Sentinel focusing on emerging threats.</p>
<p>The SOC Analyst reports to the SOC Manager and works in conjunction with the other team members to keep projects delivered on time and within budget.</p>
<p><b>JOB REQUIREMENTS</b></p>
<p>Knowledge and Experience</p>
<p>To be successful in this position, a candidate should have at least two years of hands-on experience as a Level 2 SOC analyst leveraging Microsoft Sentinel, M365 Defender products, and Microsoft Defender for Cloud in production environments. Teamwork and collaboration skills will be critical for this role. The ideal candidate will have knowledge of and experience with the SOC framework and be confident in their ability to make recommendations to improve upon operations.</p>
<p>Certification Path</p>
<p>At a minimum, the Microsoft Security Operations Analyst (SC-200) and Microsoft Cybersecurity Architect (SC-100) certifications or the ability to get one within 180 days of being hired. Training materials provided and the cost of the relevant tests will be covered.</p>
<p>Within year one employment, one of the following or otherwise approved additional certifications will be obtained: ITIL, CISSP, GSEC, CISA, SEC+, CEH, CySA+, AZ-500, MS-500.</p>
<p><b>AREAS OF RESPONSIBILITY</b></p>
<p>The SOC Analyst must be able to perform the following duties unassisted or with some reasonable accommodation made by the organization:</p>
<p>Cybersecurity Operations:</p>
<ul><li>Cybersecurity Analysis, Detection and Response: 40%
 <ul><li>Manage SOC event and information intake to include gathering intelligence reports, monitoring ticket queues, investigating reported incidents, and interacting with other security and network groups as necessary.</li>
<li>Continuously monitor network traffic and systems for security anomalies, intrusions, or breaches. Perform research and use systems and tools in places, such as SIEM, XDR, NAC, and other</li>
<li>Investigate Level 1 escalated Incidents.</li>
<li>Ensure SOC Triage Tagged Incidents are addressed in a timely manner using available reporting and metrics.</li>
<li>Monitor Level 1 Analyst performance investigating incoming Incidents using SOC-available tools.</li>
<li>Respond to attempted efforts to compromise security controls using documented procedures.</li>
<li>Participate in incident response exercises.</li>
<li>Coordinate with SIEM Engineers to tune Alerts and Events</li>
</ul></li><li>Cybersecurity Vulnerability and Threat Mitigation: 40%
<ul><li>Perform regular vulnerability assessments and security analyst of information technology systems.</li>
<li>Create reports showing risk and priorities and share findings with appropriate stakeholders and coordinate with them to implement security patches and other mitigation</li>
</ul></li><li>SOC process refinement and cross training: 20%
<ul><li>Improve SOC processes to elevate response efficiency.</li>
 <li>Consult the organization on security tool improvements for customers.</li>
 <li>Mentor Level 2/Level 1 Analysts to improve detection/analytical capabilities within the SOC.</li>
<li>Interview potential SOC resources and provide feedback.</li>
<li>Drive and monitor shift-related metrics processes ensuring applicable reporting is gathered and disseminated per SOC requirements.</li>
<li>Serve as shift subject matter experts on incident detection and analysis techniques providing guidance to junior analysts and making recommendations to organizational managers.</li>
<li>Track tactical issues in execution of SOC responsibilities.</li>
</ul></li></ul><p>Other</p>
<ul><li>Communicate effectively, both orally and in writing, to clearly express ideas and opinions.</li>
<li>Demonstrates teamwork, is receptive to and acts upon input from others, is willing and able to compromise as needed, displays willingness to work with all firm employees, and willingly assists others.</li>
<li>Demonstrates initiative and contributes new ideas; is self-motivated.</li>
<li>Demonstrates flexibility; willing to adjust to changes, able to work with all levels of firm employees.</li>
<li>Works with tight deadlines and under pressure.</li>
<li>Always exhibits positive leadership characteristics to the team, both in terms of improving processes and procedures and being proactive about the nature and scope of the team&rsquo;s work.</li>
<li>Generates and maintains documentation on SOC procedures performed and publishes such materials as appropriate.</li>
<li>Travels to any office location when needed, with at least a one (1) week notice.</li>
<li>Willing and able to work extended hours and rotate on-call duties to ensure customer incident response.</li>
<li>Performs other duties, responsibilities, and special projects, as requested.</li>
</ul>EEO/AA Employer</div></div>

SOC Analyst - Level II

DTS Solution

Role and Responsibilities 
 
 <div>
 <div>
 <ul>
 <li>
<i> </i> 
 Work as a Cyber SOC Tier 1 Analyst in DTS Solution   HawkEye CSOC cyber command center.<br> </li>
 <li>
<i> </i> 
 The security analyst Tier 1 monitors security events from the various SOC entry channels (SIEM, Tickets, Email and Phone), based on the security event severity, escalate to managed service support teams, tier 2 security analyst, and/or customer as appropriate to perform further investigation and resolution.<br> </li>
 <li>
<i> </i> 
 Reviews trouble tickets generated by SIEM Leverages emerging threat intelligence (IOCs, updated rules, etc.) to identify affected systems and the scope of the attack.<br> </li>
 <li>
<i> </i> 
 Reviews and collects asset data (configs, running processes, etc.) on systems for further investigation.<br> </li>
 <li>
<i> </i> 
 Will actively monitor security threats and risks, provide in-depth incident analysis, evaluate security incidents, and will provide proactive threat research.<br> </li>
 <li>
<i> </i> 
 Work closely with the Tier 2 Analyst to assess risk and provide recommendations for improving DTS Solution - HawkEye CSOC s customer security posture.<br> </li>
 <li>
<i> </i> 
 Participate in security incident management and vulnerability management processes. Identify, perform, review or track security incident investigations to resolution and identify lessons learnt.<br> </li>
 <li>
<i> </i> 
 Identify, perform or review root cause analysis efforts following incident recovery to enhance operations.<br> </li>
 <li>
<i> </i> 
 Participate in evaluating, recommending, implementing, and troubleshooting security. solutions and evaluating IT security of the new IT Infrastructure systems.<br> </li>
 <li>
<i> </i> 
 Ensure that corporate data and technology platform components are safeguarded from known threats.<br> </li>
 <li>
<i> </i> 
 Develop, implement and test new SIEM use cases. Regularly identify and develop new use cases for automation and tuning of security tools<br> </li>
 <li>
<i> </i> 
 Provide technical guidance to the customer s technical teams during the configuration of new log sources.<br> </li>
 <li>
<i> </i> 
 Understanding and implementing the SOC processes and procedures.<br> </li>
 <li>
<i> </i> 
 Follow standard operating procedures for detecting, classifying, and reporting.<br> </li>
 <li>
<i> </i> 
 Triage events for criticality and escalate according to predefined processes incidents under the supervision of Tier 2 and Tier 3 staff.<br> </li>
 <li>
<i> </i> 
 Communicate effectively with customers, team-mates, and management.<br> </li>
 <li>
<i> </i> 
 Provide input on tuning and optimization of security systems.<br> </li>
 <li>
<i> </i> 
 Follow ITIL practices regarding incident, problem and change management.<br> </li>
 <li>
<i> </i> 
 Document and maintain customer build documents, security procedures and processes.<br> </li>
 <li>
<i> </i> 
 Stay up to date with current vulnerabilities, attacks, and countermeasures.<br> </li>
 <li>
<i> </i> 
 Reviews the latest alerts to determine relevancy and urgency.<br> </li>
 <li>
<i> </i> 
 Creates new trouble tickets for alerts that signal an incident and require Tier 2 / Incident Response review.<br> </li>
 <li>
<i> </i> 
 Manages and configures security monitoring tools (SIEM, SYSLOG, NETFLOW, FIM, SYSMON etc.)<br> </li>
 </ul>
 </div>
 </div>
 <div>
 <div>
 <div>
</div>
 </div>
 </div>
 <div>
 <div>
 Qualifications </div>
 </div>
 <div>
 <div>
 <ul>
 <li>
<i> </i> 
 3+ years of experience of network/security architecture or operations experience<br> </li>
 <li>
<i> </i> 
 Experience working on specific SOC/SIEM platforms<br> </li>
 <li>
<i> </i> 
 Excellent experience in Elastic (ELK), Splunk, Wazuh, LogRhythm<br> </li>
 <li>
<i> </i> 
 Experience in SOAR technologies   Demisto, Cybersponse, FortiSOAR, Swimlane<br> </li>
 <li>
<i> </i> 
 Excellent experience in MDR or EDR<br> </li>
 <li>
<i> </i> 
 Experience in using security tools   commercial and open source<br> </li>
 <li>
<i> </i> 
 Experience in defensive technologies   NGFW, AV, VPN, IPS, NETFLOW, DAM, WAF, Proxy, Web Filtering etc. Ability to inspect using PCAP files.<br> </li>
 <li>
<i> </i> 
 Knowledge with Threat Hunting and MITRE ATT&amp;CK Methodology<br> </li>
 </ul>
 </div>
 </div>
 <div>
 <div>
 <div>
</div>
 </div>
 </div>
 <div>
 <div>
 Certifications </div>
 </div>
 <div>
 <div>
 <ul>
 <li>
<i> </i> 
 GIAC Certified Intrusion Analyst (GCIA)<br> </li>
 <li>
<i> </i> 
 GIAC Certified Enterprise Defender (GCED) issued by GIAC<br> </li>
 <li>
<i> </i> 
 GIAC Certified Incident Handler (GCIH) issued by GIAC<br> </li>
 <li>
<i> </i> 
 Certified Ethical Hacker (CEH) issued by EC-Council<br> </li>
 <li><br></li></ul></div></div><div><div><div><div><div><div><div> </div>
 </div>
 <div>
 <div>
 <div></div></div></div></div></div></div></div></div>

SOC Analyst - Tier 1

Search 10000+ Security operations center (soc) analyst jobs near you this October. New roles added regularly across leading industries. Apply today.