jobapplier

L2 SOC Analyst

Integrity360

Skills

Required

  • IPS
  • SIEM
  • DLP
  • Operational Technology OT
  • OT security
  • monitoring
  • CYSA+
  • Net+
  • SC-200,AZ-500,AZ-900,Splunk
  • Microsoft Word
  • Microsoft Excel

Preferred

  • Splunk
  • industrial protocols / networks
  • SCADA
  • DCS
  • PLCs
  • HMIs
  • threat hunting tools
  • event detection
  • AES

Join our team as an L2 SOC Analyst, where you will analyze alerts and incidents, identify threats and attacks, and provide insights to customers. You will act as a core investigator for security incidents, perform ad-hoc analysis of logs, and assist in the report creation process. This role requires a good knowledge of Information Security and the ability to work as part of a wider shift pattern.

Responsibilities

  • Analyser une gamme d'alertes et d'incidents, identifier les menaces et les attaques.
  • Agir en tant qu'enquêteur principal pour les incidents de sécurité et les alertes, escalader aux analystes SOC seniors.
  • Contribuer au développement de la surveillance de la sécurité des technologies opérationnelles (OT).

Conceptual knowledge in Networks and Network Security

  • Understanding of Network infrastructure hardware and protocols (TCP/IP, switches, bridges, routers, proxy servers, VPN concentrators)
  • Ability to perform event correlation, host/ network threat analysis

Requirements

  • Review the adequacy of the security controls and their ability to protect the information system and its information
  • Basic understanding or strong interest in Operational Technology (OT) environments
  • A process of on-going certification for the benefit of the business and for self-development is encouraged
  • Willingness to learn and develop skills in OT security monitoring
  • Security industry certifications: SEC+, CYSA+, Net+, SC-200,AZ-500,AZ-900,Splunk Power user
  • A working knowledge of Intrusion Prevention System (IPS), SIEM, SOAR & DLP is a nice to have
  • Experience in performing analysis on network pcaps and documents for malicious activity or codes
  • Understanding of basic security principles such as Confidentiality, Availability, Integrity

Strong Microsoft Word & Microsoft Excel skills required

  • Interest in pursuing OT-related training or certifications is encouraged
  • Ability to manage multiple incidents and make effective decisions under high pressure environment

Preferred

Experience with Splunk is a plus

  • Awareness of industrial systems such as SCADA, DCS, PLCs and HMIs
  • Exposure to industrial protocols or networks is a plus
  • Experience working with threat hunting tools is nice to have
  • Experience using SIEM & IPS solutions is a plus
  • Experience working with security event detection tools like IPS, SIEM, DLP, Anti-virus, etc
  • Understanding of Security protocols (IPSec), and encryption technologies (3DES, AES, SHA2, TLS)
  • Familiar with security best practices