SOC Analyst

Job Summary:
An SOC Analyst plays a crucial role in safeguarding an organization's digital assets and infrastructure. Their primary responsibilities revolve around monitoring, analyzing, and responding to security threats and incidents. They work closely with senior analysts and other IT professionals to identify vulnerabilities in systems and networks through various tools and techniques. Additionally, they assist in implementing security measures and protocols to mitigate risks and ensure compliance with industry standards and regulations. SOC Analysts often participate in security audits, conduct penetration testing, and contribute to the development of security policies and procedures.

Duties & Responsibilities:

1. Monitor security alerts and events using various security tools and platforms.

2. Investigate and analyze security incidents and breaches to determine the root cause.

3. Assist in the implementation and maintenance of security protocols, tools, and systems.

4. Conduct vulnerability assessments and penetration testing.

5. Assist in developing and updating security policies and procedures.

6. Participate in security awareness training and education programs for staff.

7. Collaborate with other teams to address security issues and vulnerabilities.

8. Document security incidents, procedures, and findings.

9. Stay updated on the latest security threats, trends, and technologies.

10. Provide support in responding to security incidents and emergencies.

11. Conduct regular security audits and assessments of systems and networks

Qualifications:

• Bachelor’s Degree in Computer Engineering or Computer Science
• Must have a combination of technical expertise, and industry experience to manage the operations of a Security Operations Center and address the evolving cybersecurity challenges faced by organizations.
• On-the-Job Trainee, part-time or one (1) year work experience
• Assisted senior analysts in monitoring and analyzing security events and incidents.
• Industry Certifications (e.g. CISSP, CISM, CC, etc.)
• Familiarity with regulatory compliance requirements (e.g., GDPR, HIPAA, PCI DSS)
• Knowledge of information security principles and best practices
• Familiarity with network security protocols and technologies (e.g., TCP/IP, firewalls, IDS/IPS)
• Understanding of common cyber threats and attack vectors
• Proficiency in using security tools such as SIEM (Security Information and Event Management) systems, vulnerability scanners, and antivirus software.
• Ability to work collaboratively in a team environment.
• Attention to detail and ability to prioritize tasks effectively.

Job Type: Full-time

Work Location: In person