Job Description
We are looking for an Information Security Operations Engineer responsible for monitoring and analyzing security alerts and logs, investigating and remediating security incidents, and correlating data to identify suspicious activities, patterns, and anomalies.
Responsibilities
Security Monitoring and analysis:
- Monitor and analysis of security alerts and logs from various security systems and tools for suspicious activities.
- Investigate and remediate security alerts and incidents.
- Correlate and analyze data to identify patterns or anomalies.
Security Tools Management
- Maintain and configure security tools and systems, SIEM, NDR, Email Security, EDR.
- Responsible for implementing new security tools and technologies.
Threat Intelligence
- Stay informed about current cybersecurity threats and vulnerabilities.
- Apply threat intelligence on various solutions and technologies to enhance detection and response capabilities.
Documentation And Reporting
- Maintain detailed records of security incidents, investigations, and remediation efforts.
- Prepare incident reports and documentation for management and stakeholders.
- Develop monthly security reports.
- Provide security incident reports
Collaboration
- Collaborate with other security team members and IT personnel to share information and best practices.
- Provide guidance and mentorship to junior analysts (L1) as needed.
Qualifications
Required Skills
- (2) years of experience in a security analyst role, with a focus on incident response and security monitoring.
- Proficiency with security tools and technologies, including SIEM platforms and EDR and systems.
- Professional certifications such as SANS is a plus.
- Excellent knowledge in security incident response and analysis
- Strong knowledge of network protocols, operating systems, and security threats.
- Excellent analytical and problem-solving skills.
- Effective communication and teamwork abilities.
Educational Qualifications
- The candidates must have Relevant bachelor’s degree in information security, Computer Science, or related field
Desirable
- Familiarity and experience working within the region
- Experience working as part of a MSSP or MSP provider