SOC Analyst L1

• Monitor, analyze, and validate incidents via SIEM solutions.
• Respond to incidents reported through various channels, including email, calls, and more.
• Collect relevant logs for incident containment and security investigation.
• Escalate confirmed incidents to SOC Analyst and perform preliminary analysis.
• Understand and interpret logs from diverse sources like FW, IDS, Windows DC, Cisco appliances, etc.
• Report alarms triggered or threats detected in ITSM Platforms.
• Track and update incidents based on client updates and analysis results.
• Log client requests and change requests in ticketing systems.

Requirements

• Quick learner, adaptable to dynamic duties.
• Hands-on experience in IDS/IPS, Firewall, VPN, and other security products.
• Proficient in Security Information Event Management (SIEM) tools.
• Knowledge of TCP/IP network traffic and event log analysis.
• Familiarity with LogRhythm, QRadar, ArcSight, Novell Sentinel, or any other SIEM tool.
• Understanding of ITIL disciplines such as Incident, Problem, and Change Management.