Job Description
The IT SOC Analyst functions include day-to-day operations of security solutions (SIEM, SOAR) and the identification, investigation, and resolution of security incidents detected by those systems. Secondary tasks include the development and/or implementation of security solutions, which fit into the security architecture.
Responsibilities - Analyze potential threats from a multitude of log sources and decide whether events are false positives or potential security threats.
- Determine criticality of potential security threats and decide whether to engage in Incident Response.
- Incident Response support includes following the PICERL model; Preparation, Identification, Containment, Eradication, Recovery & Lessons Learned.
- Ability to decide potential impact and whether escalation and reporting are required.
- Detailed documentation and reporting of shift activities for review by following shifts and leadership.
- Required to operate and escalate in accordance with protocols, procedures and SLAs.
- Contribute to the creation and improvement of enterprise security documents, policies, standards, baselines, guidelines and procedures, where appropriate.
Job Tags
Shift work,