SOC Analyst responsible for monitoring threats and vulnerabilities in IT systems. Engaging with clients and providing incident remediation documentation and recommendations.
Responsibilities
Monitor global IDS, Network Intruder, Firewall, DDoS detection and mitigation, availability and SIEM platforms looking for potential threats, vulnerabilities and indicators of compromise.
Provide Incident remediation and prevention documentation and recommendations to customers based on defined procedures and analyst experience.
Document and conform to processes related to security monitoring procedures.
Provide customer service that exceeds our customers’ expectations at all times.
Initiate escalation procedure to counteract potential threats, vulnerabilities and threat actors.
Compilation and review of service focused reporting.
Act as an escalation point for more junior members of the team, providing assistance and mentoring where necessary.
Providing assistance to Senior SOC Analysts on Threat Hunting engagements.
Contributing to the continuous improvement of SOC procedures and documentation.
Perform other duties as assigned.
Requirements
Practical knowledge of security and networking toolsets such as SIEM, IDS, Vulnerability Management, Availability Monitoring, packet capture and other threat detection technologies.
Pre-existing, in-depth knowledge of common network protocols.
Pre-existing, in-depth knowledge of Windows and Linux based operating systems.
Experience in the extensive analysis of common security incidents.
Ability to stay calm in highly sensitive and high-pressure incidents.
Experience with LogRhythm, ArcSight or Splunk is desirable but not required.
The following certifications are desirable, but not a requirement: CREST CPSA / CRIA / CMRE / CNIA / CHIA, CompTIA Security+, CompTIA Network+, Degree in related field.
Lead the Local Vodafone Business Service Operations Centre in Athens, Greece. Focus on delivering managed security, cloud, and SaaS services with operational excellence.
Associate SOC Analyst at NCC Group monitoring security incidents and collaborating with a cybersecurity team. Contributing to the organisation's cybersecurity posture through analysis and threat mitigation.
Security Analyst managing network security tools to protect systems at Riachuelo. Collaborating with teams to ensure operational resilience and security compliance.
Intermediate Security Operations Centre Analyst involved in IT security operations for a dynamic IT provider. Collaborating with internal teams for incident detection and response across various platforms.
Security Operations Centre Analyst for Long View's IGS branch, focused on incident detection and response. Collaborating with teams to monitor, identify, and remediate security incidents.
Security Operations Lead overseeing global SOC operations and AI product integration at Replit. Leading monitoring and incident response across multi - cloud environments and AI workloads.
SOC Engineer at Replit monitoring and assessing emerging threats in cloud infrastructure and AI coding environments. Conducting investigations and collaborating with teams for mitigation strategies.
Cybersecurity Incident Response Engineer in Comcast's Security Incident Response Team mitigating threats and restoring environments following incidents. Working with advanced technologies to safeguard customers and infrastructure.
Director of Security Operations responsible for strategic leadership and operational excellence in security at Abridge. Leading teams focused on preventing, detecting, and responding to security threats.