SOC Analyst
作为 RFA 安全运营中心成员，SOC 分析师监测和分析各种安全监控和扫描工具的输出以检测 RFA 客户端代表恶意或异常活动.SOC 分析员建议采取既定程序来发现，控制和修复网络安全事件。分析师还支持 RFA MDR 基础设施的工程，安装，配置和维护，根据需要。· 负责在24×7安全运营中心 (SOC) 环境中工作。·监控，优先考虑，相关化，分析和升级来自多个来源的安全数据，包括但不限于 SIEM 和终端点 EDR 解决方案。·独立遵循既定程序调查，升级，控制和/或消除恶意活动。·记录事件识别期间的所有活动并提供领导层的一次事故生命周期中的状态更新。将所有安全事件记录并记录到内部票务系统中。·与分析团队进行沟通和合作以提高情境意识。· 根据需要支持网络映射和漏洞扫描。· 与同事分析师建立和发展专业的合作关系。· 协助和沟通，促进协作并支持团队对运营的方法。· 支持流程改进。· 回答客户安全相关询问。资格 · 学士学位或相等水平的经验。· 2年以上作为安全/网络管理员或相等知识。· 对各种安全方法及过程以及技术安全解决方案 （防火墙和侵入检测系统）的知识。· 强大的通信技能。· 可以独立工作。· TCP/IP 协议，网络分析和网络/安全应用的知识。· 了解常见的互联网协议和应用程序。· 安全+或 InfoSec 安全认证优先。最初发布在喜马拉雅山。
查看英文原文
Certification requirements = Microsoft Certified: Security Operations Analyst Associate SC200
Working shift - 9:30AM - 6:30PM PHT - Mon-Fri
As a member of the RFA Security Operations Center, a SOC Analyst monitors and analyzes the output from various security monitoring and scanning tools to detect malicious or anomalous activity on behalf of RFA clients. The SOC Analyst recommends actions per established procedures for the detection, containment, and remediation of cyber security incidents. The analyst also supports the engineering, installation, configuration, and maintenance of the RFA MDR infrastructure, as required.
Responsibilities
- Responsible for working in a 24x7 Security Operation Center (SOC) environment.
- Monitor, prioritize, correlate, analyze, and escalate security data from multiple sources including, but not limited to SIEM and endpoint EDR solutions.
- Independently follow established procedures to investigate, escalate, contain, and/or eradicate malicious activity.
- Document all activities during incident identification and provide leadership with status updates during the life cycle of an incident. Log and record all security events to internal ticketing system.
- Communicate and collaborate with the analyst team for situational awareness.
- Support network mapping and vulnerability scanning as required.
- Build and develop professional working relationships with fellow analysts.
- Assist and communicate to foster collaboration and support a team approach to operations.
- Support process improvement.
- Respond to client security related inquiries.
Qualifications
- Bachelor’s degree or equivalent level of experience.
- 2+ years' experience as a Security/Network Administrator or equivalent knowledge.
- Knowledge of various security methodologies and processes, and technical security solutions (firewall and intrusion detection systems).
- Strong communication skills.
- Able to work independently.
- Knowledge of TCP/IP Protocols, network analysis, and network/security applications.
- Knowledge of common Internet protocols and applications.
- Security+ or InfoSec security certification preferred.
Originally posted on Himalayas