SOC Analyst

Required Skills and Experiences:

• 5 years plus experience in Security Operations or similar role
  
• Management and Coordination of Security Incidents
  
• Strong Documentation creation skills (Word documentation for sharepoint repositories plus Documentation on Confluence)
  
• Should be able to work with Ivanti RBVM SaaS and Qualys VM Platforms
  
• A General Understanding of Cloud WAF and Bot Management Concept
  
• Should be able to work with PKI and Certificates Management
  
• Should be able to work with Trellix Email security platform
  
• Should be able to work with Sophos AV Platform (Linux Skills will be required)
  
• Should be able to work with HCL Appscan Platform (Windows Admin and IIS Skills will be needed) . Appscan 360 is planned to be deployed later this year for which Linux and Kubernetes skills will be required
  
• Should be able to work with Google SecOps (SIEM and SOAR)
  
• Strong understanding of AWS Concepts
  

Key Accountabilities:

• Provide expert advice to organisational leaders and key stakeholders in security operational needs, electronic security infrastructure and associated risk management controls to ensure compliance with governance and quality requirements for the successful delivery of key business outcomes.
  
• Manage the performance of central security services to ensure service delivery meets the contractual arrangements and obligations and delivers on organisational initiatives.
  
• Monitor security systems and coordinate appropriate response to ensure security incidents are dealt with in a timely and secure manner.
  
• Ensure the accurate reporting of security incidents and conduct post incident reviews, including threat specific security risk assessments to support the capturing of lessons learnt, and to provide timely recommendations on the adaptation of policies and procedures to support risk minimisation strategies, reduce harm and prevent incident re-occurrence.
  
• Establish and maintain strong relationships with local and central security authorities to create collaborative networks and establish critical local response arrangements.
  
• Review our architecture and design through a security lens to provide actionable, timely requirements and recommendations.
  
• Keep up to date with new developments in the security industry including advisories, malware, vulnerabilities and viruses.