Associate SOC L1 Analyst

The Cyber Security Analyst is responsible for monitoring cyber security solutions triaging alerts to enable swift responses to incidents and the improved effectiveness and efficiency of detectors. The successful candidate will have a good technical knowledge of cyber systems and an interest in becoming an expert in cyber security. They should possess a good knowledge of different technologies and maintain an awareness of latest threats within industry.

Roles and Responsibilities

• Monitor and analyze cybersecurity alerts, events, and potential security incidents.
• Triage security alerts and create or update cases in the case management system to accurately document triggered alarms and detected threats.
• Ensure that all case information is complete, accurate, and up to date.
• Notify customers of security incidents and required mitigation activities, and support incident response throughout all phases of the incident management process by following established SOC procedures.
• Follow up on notifications, requests for information, and remediation activities to ensure timely resolution.
• Escalate incidents to Senior Analysts for further analysis, investigation, and guidance when required.
• Track and update cases and service requests based on new information, investigation findings, and stakeholder feedback.
• Coordinate with internal and external stakeholders to build and maintain positive working relationships.
• Support Senior Analysts in preparing Post-Incident Reviews (PIRs) and developing ad-hoc reports, dashboards, and metrics to measure and improve SOC operational effectiveness.
• Identify opportunities to improve processes, procedures, and services to enhance operational efficiency and continuously add value for customers.

Educational Qualifications

• Relevant degree in Information Technology, Computer Science, Cybersecurity, or a related field.
• One or more relevant industry certifications.

Required Skills

• A strong desire to learn about different security technologies and understand how security operations function.
• A passion for information security and a commitment to developing a career in this field.
• Reliability, accountability, and a strong work ethic.
• Well-developed logical and analytical thinking skills, with the ability to investigate and analyze security incidents.
• Ability to work in a shift-based schedule.
• Excellent written and verbal communication skills in English.
• Good understanding of TCP/IP network traffic and event log analysis.
• Good understanding of operating systems, network architecture, and common system design principles.
• Understanding of general cybersecurity threats, vulnerabilities, and exploits, along with appropriate mitigation techniques.

Desirable Skills & Experience

• Familiarity with and experience working within the region.
• Previous experience working for a Managed Security Services Provider (MSSP) or Managed Detection and Response (MDR) provider.
• Experience working in a continuous 24/7 operations environment.
• Familiarity and hands-on experience with multiple Security Information and Event Management (SIEM) and Endpoint Detection and Response (EDR) solutions.
• One or more relevant industry certifications, such as GSEC, CySA+, CSA, or equivalent.