Position summary:

Candidate will work as an entry-level SOC Level 0 Engineer to join our Security Operations Center (SOC). 
The candidate will be responsible for monitoring security alerts, analyzing threats, and escalating incidents as needed. The ideal candidate should have a basic understanding of networking (CCNA-level), cybersecurity fundamentals.

Key Roles & Responsibilities:

•    Alert Monitoring, Documentation & Reporting:
o    Undergo training for 1 months to learn security monitoring concepts, primary analysis of the logs, network concepts, handling customer calls, etc.
o    Assist our security engineers in their day-to-day functions, such as preparing reports and analyzing security traffic
o    Perform initial triage of security incidents and escalate as needed.
o    Investigate alerts related to network traffic, authentication failures, and potential threats.
o    Conduct Alarms Drilldown on EDR/SIEM for deeper investigation.
o    Perform Offline Log Analysis on EDR/SIEM to identify hidden threats.
o    Manage incident response by creating and updating tickets in the ITSM tool.
o    Prepare daily, weekly, monthly, and quarterly reports on security incidents and trends.
o    Document security events, investigations, and recommendations in the ITSM tool.
o    Ensure proper handover by understanding and acknowledging tasks from the previous shift.

Process Improvement & Playbook Adherence:

o    Follow established SOC playbooks and procedures for incident handling.
o    Provide regular updates and reports on learning and progress.
o    Provide feedback on process gaps and suggest improvements for better efficiency.
o    Ensure compliance with incident management guidelines and processes.

Collaboration & Communication: 

o    Work with L2 analysts and SOC leads to ensure smooth incident escalation. 
o    Communicate findings and recommendations clearly to relevant POC.
o    Acknowledge and respond to customer emails promptly to maintain workflow continuity.

Learning & Skill Development:

o    Stay updated with the latest cybersecurity threats, vulnerabilities, and attack techniques.
o    Participate in training sessions and knowledge-sharing activities within the SOC team.
o    Enhance use case understanding to improve accuracy in handling security alerts.

Basic Qualifications:

•    Bachelor’s degree in computer science, IT, Cybersecurity, or a related field (or equivalent practical experience). 
•    Certifications: CCNA Security
•    Good communication skills
•    Good analytical skills
•    Quick learner
•    Team player

Preferred Qualifications:

•    No required work experience in the IT security industry
•    Relevant certifications such as CCNA, Comptia security+, and CEH are required.