SOC Analyst L1

Monitor, analyze, and validate incidents via SIEM solutions. Respond to incidents reported through various channels, including email, calls, and more. Collect relevant logs for incident containment and security investigation. Escalate confirmed incidents to SOC Analyst and perform preliminary analysis. Understand and interpret logs from diverse sources like FW, IDS, Windows DC, Cisco appliances, etc. Report alarms triggered or threats detected in ITSM Platforms. Track and update incidents based on client updates and analysis results. Log client requests and change requests in ticketing systems.

Requirements

Quick learner, adaptable to dynamic duties. Hands-on

experience

in IDS/IPS, Firewall, VPN, and other security products. Proficient in Security Information Event Management (SIEM) tools. Knowledge of TCP/IP network traffic and event log analysis. Familiarity with LogRhythm, QRadar, ArcSight, Novell Sentinel, or any other SIEM tool. Understanding of ITIL disciplines such as Incident, Problem, and Change Management.

Quick learner, adaptable to dynamic duties. Hands-on

experience

in IDS/IPS, Firewall, VPN, and other security products. Proficient in Security Information Event Management (SIEM) tools. Knowledge of TCP/IP network traffic and event log analysis. Familiarity with LogRhythm, QRadar, ArcSight, Novell Sentinel, or any other SIEM tool. Understanding of ITIL disciplines such as Incident, Problem, and Change Management.