Soc L2/L3

Job description

Role & responsibilities • Monitor multiple security technologies such as SIEM, Antivirus, Vulnerability management, Web Proxy, Security Patch management. • Tune/Create SIEM correlation rules. • Perform in-depth incident and event analysis. • Respond and handle the security incidents. • Agree and align on reporting and monitoring requirements with business stakeholders. • Conduct research on emerging security threats. • Modify Standard Operating Procedures (SOPs) and training documentation. • Coach junior team members. • Good Knowledge on SIEM tools like QROC, Arcsight, SPLUNK or Sentinel. • Knowledge and experience with PCs, LAN topologies, routers, hubs, and terminal servers • Knowledge of security applications such as IDS, Security Event Management and anomaly detection tools. • Knowledge of VPN technology. • Knowledge of investigation tools like FTK imager, memory dump, threat analysis tools. • Ability to read and interpret network diagrams. • Oversight of facilitates for other offices in the UK and provide support and guidance where required. • Ability to translate event analysis findings into new monitoring proposals. • Remain flexible with 24/7 shift and task assignments.