Support the 24x7x365 Security Operation Center (SOC) by providing a consolidated enterprise view of security events and network activity in an IT environment of companies.
Achievement of required certifications during defined period for performance of job duties;
Improve the cybersecurity management by understanding, identifying and investigating cyber events in order to respond effectively, develop mitigation actions;
Track cyber security incidents notifications, identify trends and activities to initially respond and recover;
Perform cyber incident management through triage, investigation, and analysis, including incidents logging, tracking and reporting; Perform problem resolution and provide initial subject matter expertise in cyber security investigations based on best practices;
Collect, analyze, and correlate security events and use discovered data to enable recommendation of mitigation of potential incidents;
Identify events that pose a threat to the confidentiality, integrity and availability (CIA) of information or systems of stakeholders;
Provide quality assurance accuracy, consistency and reliability to security event data in tickets and reports;
Provide incident coordination and updates to SOC team;
Provide periodic cyber security events’ report to stakeholders;
Analyze responding options to verified incidents utilizing a wide array of tools to mitigate active threats;
Provide updates to SOC Procedures;
Namizədə tələblər
General IT and Information Security knowledge in one or more of the following areas: Cloud infrastructure Networking Operating Systems (Linux and/or Windows)