Experience:3-5 years minimum
Job Location :Bengaluru
Key Responsibilities Of The Job
The level 2 security analyst owns the successful adherence to all procedures executed during their presence in the SOC including documentation and measurement of all subordinate procedures as well as the continual improvements to them.
As the senior analysts on a shift, SOC level 2 analysts have final decision authority for escalation of incidents inside the SOC and will serve as senior mentor to SOC level 1 staff.
Additionally, The SOC Level 2 Analyst(s) Will
- Track tactical issues in execution of SOC responsibilities
- Monitor level 1 analyst performance investigating incoming Incidents using SOC-available tools.
- Ensure SOC triage tagged incidents are addressed in a timely manner using available reporting and metrics.
- Investigate Level 1 escalated Incidents.
- Mentor level 1 Analysts to improve detection/analytical capabilities within the SOC.
- Manage SOC event and information intake to include gathering intelligence reports, monitoring ticket queues, investigating reported incidents, and interacting with other security and network groups as necessary.
- Coordinate with SIEM Engineers to tune alerts and events.
- Serve as shift subject matter experts on incident detection and analysis techniques providing guidance to junior analysts and making recommendations to organizational managers.
- Drive and monitor shift-related metrics processes ensuring applicable reporting is gathered and disseminated per SOC requirements.
Interfaces
- Group IS&T department: EUSS, IT, Front & Back Office
- Affiliates IS&T, asset owners
- IT Project managers
- Technical Direction & related technical teams
- SOC team
Education/ Experiences/ Skills/ Competencies Required
- Framework MITRE ATT&CK,
- Attack technique/APT,
- Monitoring, research, analysis, and response to alerts,
- Creation and implementation of use cases,
- SIEM Microsoft Sentinel,
- Principles and methods of investigation (Chain of custody, ...)
Core Skills
- Excellent time and priority management.
- Ability to work in an international context.
- Ability to analyze and synthesize
- Experience of working in a dynamic environment and ability to multi-task
