Описание
Job Overview We seek a vigilant L1 Security Operations Center (SOC) Analyst to join our 24/7cybersecurity team. Operating on 12-hour rotational shifts, you will perform real-time monitoring, threat detection, and initial incident response using SIEM/XDR platforms.
The role
requires foundational knowledge of network security, log analysis, and attack vectors to defend against threats while escalating complex incidents to senior analysts. This position is critical formaintaining our security posture across global digital assets. Duties and
Responsibilities
Continuous Monitoring & Detection: 1. Monitor SIEM/XDR tools (e.g., Splunk, Sentinel, QRadar) for security alerts across networks, endpoints, and cloud environments. 2.
Analyze logs from firewalls, IDS/IPS, EDR, and other security tools to identify malicious activity. Incident Triage & Response: 1. Perform initial investigation and classification of security events (malware, phishing,DDoS).
2. Execute predefined playbooks for containment (e.g., isolate hosts, block IPs). 3.
Escalate confirmed incidents to L2/L3 analysts with detailed documentation. Threat Intelligence Utilization: 1. Apply threat intelligence feeds (e.g., MITRE ATT&CK) to contextualize alerts.
2. Monitor dark web/IoC sources for emerging threats relevant to the organization. Reporting& Documentation: 1.
Document incidents in ticketing systems (e.g., Jira, ServiceNow) with timelines, actions taken, and evidence. 2. Generate daily shift reports highlighting thr
Полное описание, компания и ссылка на вакансию — после входа.
ВойтиКонтакты работодателя (email/phone/telegram) скрыты из публичного превью —
отправьте резюме, чтобы мы связали вас напрямую.