Job Requirements
NSOC Senior Engineer Roles & responsibilities
Key Responsibilities
ResponsibilityDescriptionSecurity Frameworks & ToolsStrong knowledge of security frameworks and standards such as NIST, ISO 27001, and MITRE ATT&CK.
Familiarity with attacker TTPs (Tactics, Techniques, and Procedures).
Proficient in tools like SIEM, IDS/IPS, firewalls, endpoint protection, and network monitoring systems.Process Adherence & ReportingFollow NSOC processes and policies diligently.
Ensure timely and accurate reporting of incidents and activities.Security MonitoringContinuously monitor security events to detect and prevent breaches.
Analyze logs, alerts, and network traffic for suspicious activity.Network MonitoringMonitor network health, performance, and availability.
Use tools to detect outages, performance degradation, and anomalies.Incident ResponseRespond to security and network incidents in real-time.
Investigate, identify root causes, and implement containment and remediation actions.Threat IntelligenceStay updated with the latest threat intelligence and cyber trends.
Analyze threat feeds and share insights with the security team.CollaborationWork closely with IT, infrastructure, and application teams.
Ensure coordinated and timely responses to incidents and issues.Reporting & DocumentationPrepare and present regular reports on incidents, trends, and SOC performance.
Maintain detailed documentation for audits and compliance.
Certifications (Mandatory/Preferred)
CertificationPreferenceMicrosoft Certified: Security Operations Analyst AssociatePlusCertified Ethical Hacker (CEH)PlusAdditional certifications like CompTIA Security+, CISSP, or GIACPlus
Work Experience
- Proficient in using a range of security tools and technologies, such as SIEM (Security Information and Event Management), IDS/IPS (Intrusion Detection and Prevention System), firewalls, and endpoint protection tools.
- Knowledge of security frameworks and standards, such as NIST and ISO, Familiarity with threat intelligence and the tactics, techniques, and procedures (TTPs) used by attackers.
Benefits
N/a
