Associate - SOC L1 Analysis

Job Description

The individual designated for the role of SOC Analyst must possess the skills and experience necessary to support both day-to-day operations of L2/L3. And the candidate must have experience in network and security operations and projects.

• Operate within a SOC environment to analyze alerts and log data promptly and effectively, assessing the severity and impact of potential threats to prioritize alerts and incidents accurately.
• Monitor and analyze Security Information and Event Management (SIEM) tools such as Microsoft Sentinel to identify potential security incidents and anomalies.
• Conduct in-depth analysis of security events, collaborating directly with customers to elevate and investigate incidents, including determining scope, impact, and root cause.
• Execute swift containment and remediation measures for identified security incidents using predefined response strategies to isolate affected systems and prevent further compromise.
• Participate in the creation and enhancement of processes and procedures, including Security Playbooks.
• Refine and optimize analytical rules within the Sentinel SIEM platform to reduce false positive alerts and improve detection accuracy and efficiency.
• Assist in vulnerability assessments and penetration testing activities, and prioritize vulnerabilities for remediation in collaboration with customers.
• Maintain accurate records of incidents, investigations, and security-related activities within the incident management platform.
• Prepare detailed reports on security incidents, response actions, and recommendations for improvement.
• Research emerging security concepts and present findings to internal teams as well as customers.

• Hands-on experience in security monitoring using one or more SIEM technologies, preferably Microsoft Sentinel, along with knowledge of EDR solutions including Microsoft Defender.
• Strong understanding of Windows, Linux, and cloud technologies, including Microsoft Azure and Office 365.
• Good understanding of security solutions such as SIEMs, web proxies, anti-virus, firewalls, VPNs, authentication mechanisms, encryption, and IPS/IDS.
• Strong understanding of networking principles, including TCP/IP, WANs, LANs, and commonly used Internet protocols.
• Bachelor's degree in Computer Science, Information Security, or a related field.
• Microsoft Security Operations Analyst certification.