SOC Analyst L1 Position Description
#This will be a shift role, working on 12-hour shift for 4 days and 4 days rostered day off#
The SOC Analyst role is responsible for monitoring information sources such as the SIEM and other data sources for security anomalies and performing triage and incident investigation including maintaining Cyber security products.
This role is critical to ensure issues are detected and responded to in a timely fashion and is an exciting position for those looking to enter the Cyber Security Market.
Responsibilities
- Ensure alerts are reviewed in a timely manner;
- Work with SIEM platforms such as Sentinel, Splunk and CrowdStrike NextGen SIEM
- Performing initial assessment and triage as required then either with escalation to the appropriate team in a timely fashion or complete the investigation using available resources;
- Understanding and reviewing regular intelligence briefs to understand any changes to the threat landscape;
- Review and updating detection rules
- Updating and development of process documentation or play books
- Working with other teams when appropriate to improve knowledge of the customers environments and possible threats;
- Identifying any deficiencies in the monitoring systems and suggesting improvements;
- Performing incident response tasks
- Contribute to continues service improvements uplift for the SOC
- Pro-actively identify areas of risk
- Perform threat hunting as required based on threat intelligence information through hypothesis development
- Review, updating and maintaining required dashboard, reports and alerting
Requirements
Skills and Experience
- Overall strong ability to identify risks and threats
- Excellent analytical skills and attention to detail
- You will have the ability to find solutions to complex issues
- Understanding of best practices in network security, security operations, systems security, policy, and incident response
- Scripting skills (e.g., Python, C, C++, Java, Ruby, or PowerShell)
- Excellent communication skills both written and oral
- Tertiary education in information or cyber security and or software development
