L2 SOC Analyst

Join our team as an L2 SOC Analyst, where you will analyze alerts and incidents, identify threats and attacks, and provide insights to customers. You will act as a core investigator for security incidents, perform ad-hoc analysis of logs, and assist in the report creation process. This role requires a good knowledge of Information Security and the ability to work as part of a wider shift pattern.

• Analyser une gamme d'alertes et d'incidents, identifier les menaces et les attaques.
• Agir en tant qu'enquêteur principal pour les incidents de sécurité et les alertes, escalader aux analystes SOC seniors.
• Contribuer au développement de la surveillance de la sécurité des technologies opérationnelles (OT).

• Conceptual knowledge in Networks and Network Security
• Understanding of Network infrastructure hardware and protocols (TCP/IP, switches, bridges, routers, proxy servers, VPN concentrators)
• Ability to perform event correlation, host/ network threat analysis
• Review the adequacy of the security controls and their ability to protect the information system and its information
• Basic understanding or strong interest in Operational Technology (OT) environments
• A process of on-going certification for the benefit of the business and for self-development is encouraged
• Willingness to learn and develop skills in OT security monitoring
• Security industry certifications: SEC+, CYSA+, Net+, SC-200,AZ-500,AZ-900,Splunk Power user
• A working knowledge of Intrusion Prevention System (IPS), SIEM, SOAR & DLP is a nice to have
• Experience with Splunk is a plus
• Awareness of industrial systems such as SCADA, DCS, PLCs and HMIs
• Exposure to industrial protocols or networks is a plus
• Experience in performing analysis on network pcaps and documents for malicious activity or codes
• Understanding of basic security principles such as Confidentiality, Availability, Integrity
• Strong Microsoft Word & Microsoft Excel skills required
• Experience working with threat hunting tools is nice to have
• Experience using SIEM & IPS solutions is a plus
• Experience working with security event detection tools like IPS, SIEM, DLP, Anti-virus, etc
• Understanding of Security protocols (IPSec), and encryption technologies (3DES, AES, SHA2, TLS)
• Interest in pursuing OT-related training or certifications is encouraged
• Ability to manage multiple incidents and make effective decisions under high pressure environment
• Familiar with security best practices