L1 SOC Analyst

Job Description:

1. Monitoring and analysis of cyber security events using Microsoft Sentinel SIEM.

2. Monitor internal and external threats, examine logs, events, and alerts generated by multiple platforms for anomalous activity.

3. Development and execution of SOC and standard operating procedures (SOP).

4. Triage security events and incidents, detect anomalies, and report/direct remediation actions.

5. Timely escalate security incidents whenever SLA's are not met.

6. Assist in incident detection and resolving incidents by following all phases of incident management lifecycle.

7. Integrate and collaborate threat information to improve incident detection capabilities.

8. Should be capable of report generation from security solutions and preparation of report for management or leadership review.

9. Collect evidence of security incidents, and other error conditions that may constitute a breach in security or a degradation of integrity or confidentiality of systems and data.

Ability to coordinate and work with stakeholders to track security incidents till closure.

Job Description:

1. Monitoring and analysis of cyber security events using Microsoft Sentinel SIEM.

2. Monitor internal and external threats, examine logs, events, and alerts generated by multiple platforms for anomalous activity.

3. Development and execution of SOC and standard operating procedures (SOP).

4. Triage security events and incidents, detect anomalies, and report/direct remediation actions.

5. Timely escalate security incidents whenever SLA's are not met.

6. Assist in incident detection and resolving incidents by following all phases of incident management lifecycle.

7. Integrate and collaborate threat information to improve incident detection capabilities.

8. Should be capable of report generation from security solutions and preparation of report for management or leadership review.

9. Collect evidence of security incidents, and other error conditions that may constitute a breach in security or a degradation of integrity or confidentiality of systems and data.

Ability to coordinate and work with stakeholders to track security incidents till closure.