Threat Monitoring Analyst – SOC TIER 1

Misión

Responsible for monitoring computer security events according to documented procedures and industry best practices. First line of defense in protecting’s information systems from internal and external threats.

Funciones

  • Monitor security events received through alerts from SIEM or other security tools
  • Revise alerts escalated by end users
  • Carry out Level 1 triage of incoming issues ( initial assessing the priority of the event, initial determination of incident to determine risk and damage or appropriate routing of security or privacy data request)
  • Carry out limited incident response to end users for low complexity security incidents
  • Maintain assigned ticket queue
  • Participate actively in the resolution of incidents, even after they are escalated

Requisitos

Education
Technical degree or Computing Modules

Other

  • Security Essentials
  • Masters Degree on Cybersecurity or basic certifications (ITIL, CCNA, CEH, CompTIA Security+, etc.)
  • Computer Forensic Investigation-Windows in depth
  • Security Incident Handling and forensics

Competencies

  • Strong analytical and problem
  • Process and procedure adherence

Languages
English Advance.

Experiencia

  • General network knowledge, tcp/ip troubleshooting
  • Ability to trace down an endpoint on the network based on ticket information
  • Familiarity with system log information and what it means
  • Understanding of common network services (web, mail, dns, authentication)
  • General desktop os and server os knowledge
  • Tcp/ip, internet routing, unix / linux & windows nt
  • Knowledge of host based firewalls, anti-malware, hids
  • Technical hands on experienced and with a good understanding of common technology platforms and security technologies
  • Minimum 1 year experience in SOC