This role involves monitoring, analyzing, and triaging security alerts through various security monitoring solutions such as SIEM, EDR, XDR, NDR, Threat Intelligence, and SOAR platforms. The primary focus is to identify and report potential security incidents promptly, adhering to defined service-level agreements (SLAs). The position requires close coordination with relevant teams to facilitate incident resolution and continuously improve the quality of alerts and detection capabilities.
Key Responsibilities
Security Monitoring & Alert Analysis: Actively monitor and analyze security alerts using tools like SIEM, EDR, NDR, and SOAR to detect potential threats and vulnerabilities.
Log Analysis & Incident Triage: Conduct detailed log analysis and triage security alerts to accurately identify and prioritize potential security incidents.
Incident Reporting & SLA Compliance: Ensure timely and accurate reporting of security alerts and incidents in line with established SLAs.
Incident Coordination & Resolution: Collaborate with cross-functional teams to support the investigation and resolution of security incidents, ensuring effective communication throughout the process.
Alert Tuning & False-Positive Reduction: Work alongside SOC solution administrators to fine-tune alert configurations, aiming to reduce false positives and enhance detection accuracy.
Required Qualifications
- Bachelor’s or Master’s degree in Computer Science, Information Security, or a related field from an HEC-recognized university.
- Minimum of 1 year of experience working within a Security Operations Center (SOC).
- Hands-on experience operating and managing SOC tools, including SIEM, SOAR, EDR, NDR, Threat Intelligence platforms, and Case Management systems.
- Proven ability in log analysis and triaging security alerts effectively.
- Strong analytical and critical thinking skills to assess security events and identify threats.
Preferred Qualifications and Benefits
- Relevant professional certifications in cybersecurity or related disciplines will be considered an advantage.
- Excellent attention to detail and problem-solving abilities to investigate and respond to security incidents.
- Effective communication skills for clear reporting and escalation of security findings.
- Ability to work collaboratively within SOC teams and demonstrate a passion for cybersecurity.
This position offers the opportunity to work in a dynamic cybersecurity environment, contributing to the protection of organizational assets by proactively identifying and mitigating security threats.