Security Operations Centre Analyst (Night Shift)

Job Description

• Continuously monitor, analyze, and respond to security incidents during night shift
• Identify, investigate, and triage cybersecurity incidents (e.g., malware infections, unauthorized access, data breaches, BEC)
• Follow predefined incident response protocols and SOPs and escalate to L2 Engineers and SOC Manager if required
• Provide Level 1 configuration, installation and integration if support is required for security products
• Provide troubleshooting and resolution for security products
• Assist in identifying indicators of compromise (IOCs) and applying them to current environments
• Prepare and generate security reports and provide incident summary reports
• Contribute to developing playbooks and SOPs for continuous security improvement
• Demonstrate flexibility and a willingness to cover additional shifts as needed
• Work closely with relevant team to ensure the security services compliance with security standards or industry best practices

Requirements

[Endpoint, Email Network Security]

• Endpoint Security (e.g. Anti-virus)
• Endpoint Management (Intune, RMM)
• Preferably: Firewall Management
• Network security (e.g. IPS/IDS, proxy)
• Spam Filter Management

[Threat Monitoring]

• Endpoint Detect and Response
• Preferably: SIEM / SOC
• Database Activities Monitoring
• Automation Orchestration (e.g. SOAR)

[Access Management]

• Privileged Access Identity Management
• Private Key Infrastructure
• 2 Factor Authentications