The Executive SOC plays a crucial role in ensuring the security and integrity of an organization's network infrastructure. This position is vital for protecting sensitive information and maintaining the overall security posture of the organization. The ideal candidate will be responsible for the following:
- Monitoring and Alert Handling:
- Monitor security alerts and events generated by security systems, such as intrusion detection/prevention systems, firewalls, and antivirus solutions.
- Respond to and investigate alerts to determine if they represent security incidents.
- Incident Triage:
- Conduct initial triage of security incidents to assess the severity and impact.
- Classify and prioritize incidents based on established criteria.
- Security Incident Analysis:
- Analyze security events and incidents to identify patterns, trends, and potential security threats.
- Collaborate with higher-level SOC analysts or incident response teams for complex incident analysis.
- Documentation:
- Maintain detailed records of security incidents, including actions taken, findings, and resolutions.
- Document standard operating procedures (SOPs) for common incidents and responses.
- Communication:
- Communicate with the customer's IT team to provide updates on security incidents.
- Escalate incidents to higher-level SOC analysts or incident response teams as needed.
- Security Tool Management:
- Use and manage security tools and technologies to monitor and analyze network traffic, logs, and alerts.
- Ensure the proper functioning of security tools and report any issues for resolution.
- Vulnerability Management:
- Assist in the identification and management of vulnerabilities within the organization's systems.
- Report and escalate vulnerabilities to appropriate teams for remediation.
- Security Awareness:
- Contribute to security awareness programs helping to educate employees about potential threats and best practices.
- Continuous Learning:
- Stay informed about the latest cybersecurity threats, vulnerabilities, and industry best practices.
- Participate in training and professional development activities to enhance skills.
- Compliance Monitoring:
- Ensure that security activities align with regulatory requirements and industry standards.
- Assist in the preparation of reports for compliance purposes.
The ideal candidate should possess the following qualifications:
- Bachelor's degree in a relevant field (Computer Science, Information Technology, etc.).
- Professional certifications such as CEH.
- Hands-on experience with SIEM tools.
- Strong understanding of networking protocols, firewalls, VPNs, and intrusion detection/prevention systems.
- Analytical and problem-solving skills.
- The ability to react quickly and efficiently under pressure.
- Good communication skills as regular reporting to the team lead is required.
- Effective partnership and collaboration skills.
- Knowledge of TCP/IP, computer networking, routing, and switching.
- Understanding and working with Windows and Linux operating systems.
- Minimum of 0 to 3years of experience in a security operations center or related field.
