Job Title: Security Operations Center (SOC) Analyst
Location: Gulberg, Lahore (On-Site Role)
Experience: 2 to 3 Years
Responsibilities:
Tech Bridge Consultancy seeks experience in security monitoring solutions, incident response and other cybersecurity tools and technologies implementation capabilities. In your role, your duties will include the following:
- SOC monitoring coverage for any of the following shifts: EST Time 8:00am – 4:00pm (PST 5:00pm – 1:00am), 4:00pm – 12:00am (PST 1:00am – 9:00am), 12:00am – 8:00am (PST 9:00am – 5:00pm); the work week is considered a minimum of 40 hours each week. Day to day security logging and monitoring solutions; identifying false positives and detecting potential or real threats
- In-depth analysis of security events, alerts and incidents
- Promptly responding to customer enquiries via emails and/or phone calls; responding to security incidents and threats
- Analyzing logs, network traffic and data to identify potential threats and vulnerabilities
- Development security dashboards and reporting; compile threat intelligence reports and manage log data
- Configuration of security tools and technologies (e.g. SIEM, EDR, VM, etc.)
- Configuration of network and security appliances (e.g. Firewalls, routers, switches, HIDS, NIDS, etc.)
- Endpoint security configuration (Defender, CrowdStrike, SentinelOne, Webroot, Kaspersky, etc.)
- Firewall rules configuration and optimization
- SIEM rules configuration (Sentinel, Splunk, LogRhythm, etc.)
- Technical writing and security policy development
- Staying current on industry trends, keeping up-to-date with relevant CVE’s and the evolving threat landscape
- Conducting vulnerability scans of network and applications
- Keeping company systems up-to-date with current security patches
- Recommending security improvements to line managers or senior management
Requirements:
- Strong understanding of cybersecurity principles and the SOC environment
- Bachelor’s degree in cyber security, computer sciences or equivalent
- Good understanding of vulnerability management tools and techniques
- Good understanding of Windows, Linux and macOS operating systems and endpoints
- Knowledge of modern problem-solving skills, and keen attention to detail
- Good understanding of the modern security in SDLC practices
- Capable of Balancing multiple priorities and remaining flexible in a changing environment
- Good communication and interpersonal skills
- Familiarity with regulatory compliance and security standards (ISO27001, SOC 2 TYPE 1 and TYPE 2, NERC CIP, IE 62443, NIST CSF, etc.)
Other duties may include:
· Contribute to the preparation of technical documentation, including proposals, tenders, RFPs (Requests for Proposals), and RFIs (Requests for Information)
· Participate in business development activities directly related to the sale of cybersecurity services and other tasks supporting the delivery of cybersecurity products and services
· Personnel are required to work on-site; remote or hybrid work options will not be available
· Personnel must strictly use company-provided computer assets, hardware, and licensed software to perform all assigned services
· Personnel must not work more than 12 consecutive hours per shift
· Personnel are required to adhere to internal cybersecurity and IT policies and standards
· Personnel are required to strictly uphold confidentiality and integrity clauses while dealing with all customer data
Job Type: Full-time
Ability to commute/relocate:
- Lahore: Reliably commute or planning to relocate before starting work (Required)
Application Question(s):
- Are you comfortable with an on-site role, as this position is not remote or hybrid?
- Have you worked with vulnerability management tools?
- Are you familiar with any security compliance standards like ISO 27001, SOC 2, or NIST?
- Are you comfortable working onsite in any of the following SOC shift timings?
- Do you have experience working in a SOC (Security Operations Center)?
Language:
Work Location: In person