SOC Trainee

Job Brief

Responsible for monitoring the different security systems utilized in a SOC environment to ensure the timely detection of security incidents. This position involves performing daily operational security-related tasks (monitoring, investigating, escalating, and responding)

Key Responsibilities

• Actively monitor security alerts from the SIEM and other security tools to identify potential threats.
• Perform initial analysis to assess the severity and validity of alerts.
• Escalate incidents requiring advanced analysis or response to L2 analysts or relevant teams.
• Review and analyze logs from various sources, such as firewalls, servers, and endpoints, to detect suspicious activity.
• Prepare and maintain periodic reports on security incidents and events for internal teams and stakeholders.
• Respond to customer requests for information or support regarding security incidents or events.
• Assist in maintaining SOC tools, dashboards, and processes under supervision.
• Stay informed about the latest cybersecurity threats and attack vectors.

Qualifications, Skills and Experience

Education: Bachelor Degree in Cyber Security, Computer Science, Computer Engineering or any related field

Level of Experience: Basic Knowledge (0-2Yrs) in IT security, cybersecurity, or SOC operations.

Certifications & Licensure:

Essential:

One or more of the following technical certificates (or equivalent):

• EC-Council Certified SOC Analyst (CSA)
• EC-Council Certified Ethical Hacker (CEH)
• CompTIA Security+

Desirable:

One or more of the following technical certificates (or equivalent):

• Splunk Core Certified Power User
• Cisco Certified Network Associate Routing & Switching (CCNA)
• eCIR (Certified Incident Responder)

Tools & Systems:

Essential:

• Basic knowledge of the following security systems:

o Security information and event management (SIEM)

o Intrusion detection and prevention (IDPS)

• Good knowledge of various operating system including Windows, Linux and UNIX

Desirable:

• Basic knowledge of the following security systems:

o Next-generation firewall (NGFW)

o Endpoint Antivirus/Antimalware

o Endpoint detection and response (EDR)

o Denial of service (DoS) attacks mitigation