Threat Monitoring Analyst – SOC TIER 1
Misión
Responsible for monitoring computer security events according to documented procedures and industry best practices. First line of defense in protecting’s information systems from internal and external threats.
Funciones
- Monitor security events received through alerts from SIEM or other security tools
- Revise alerts escalated by end users
- Carry out Level 1 triage of incoming issues ( initial assessing the priority of the event, initial determination of incident to determine risk and damage or appropriate routing of security or privacy data request)
- Carry out limited incident response to end users for low complexity security incidents
- Maintain assigned ticket queue
- Participate actively in the resolution of incidents, even after they are escalated
Requisitos
Education
Technical degree or Computing Modules
Other
- Security Essentials
- Masters Degree on Cybersecurity or basic certifications (ITIL, CCNA, CEH, CompTIA Security+, etc.)
- Computer Forensic Investigation-Windows in depth
- Security Incident Handling and forensics
Competencies
- Strong analytical and problem
- Process and procedure adherence
Languages
English Advance.
Experiencia
- General network knowledge, tcp/ip troubleshooting
- Ability to trace down an endpoint on the network based on ticket information
- Familiarity with system log information and what it means
- Understanding of common network services (web, mail, dns, authentication)
- General desktop os and server os knowledge
- Tcp/ip, internet routing, unix / linux & windows nt
- Knowledge of host based firewalls, anti-malware, hids
- Technical hands on experienced and with a good understanding of common technology platforms and security technologies
- Minimum 1 year experience in SOC
