Level 1 SOC Analyst  

• Continuously monitors the alert queue, triages security alerts, monitors health of security sensors and endpoints, collects data and context necessary to initiate Incident Response work
• Analyze and determine actionable items based on all available logs, packet captures and all other data sifting through them and accurately distinguishing actionable from all other ‘static’ and eliminating false positives and irrelevant information.
• Ensure all security systems are up-to-date in terms of software and hardware changes.
• Plan and document all data and information related to information security.

Should have an acceptable degree of knowledge with any of the following:

• Security Information and Event Management (SIEM) System
• IDS/IPS penetration, vulnerability testing
• Firewall intrusion detection, prevention, protocols
• Secure coding practices, ethical hacking and threat modelling
• Identity and access manager principles
• Application security and encryption technologies
• Secure network architecture
• Advanced Persistent Threats (APT), phishing and social engineering, network access, controllers, anti-malware and enhanced authentication.
• Graduate of any four (4) or five (5) year collegiate course preferably in the field of Information and Communication Technology.
• Work related experience of at least two (2) years performing, security events monitoring. Experience in security incident analysis, computer forensics or security incident response an advantage
• Certifications in any of the following is an advantage
  • Certified Ethical Hacking (CEH)
  • Cisco Certified Network Professional (CCNP Security)
  • Certified Information Security Systems Professional (CISSP)