SOC L1 Analyst  

Duties and Responsibilities

Core Responsibilities

• Accomplish all assigned tasks by the management in a timely and effective manner as deemed necessary for the betterment of the organization as a whole.

Service Operations Management - Event & Monitoring Management

• Monitor SIEM alert queue, health of security sensors and endpoint and collects data and context necessary to initiate Incident Response work.
• Monitor that endpoint security controls are up-to-date in terms on software version and escalate to Technology Management group for updating/patching.
• Create SOC tickets and ensure regular update to tickets is being performed.
• Provide detailed analysis on the threats by identifying its behavior and Indicator of Compromise (IOC)
• Escalate to SOC Incident Responder (L2) items that has been categorized as actionable information security incidents.

Change Management

• Diligently monitor affected resources before, during and after a change is implemented.

Qualifications

A. Minimum Education

• Bachelor's Degree in Information Technology, Engineering or Computer/Programming Science; or equivalent course or work experience (Preferred)

B. Minimum Experience/Training

Experience

• Preferably with at least 1-year working experience in a SOC operations environment or equivalent IT field-related work OR have undergone Trends Cadetship Program.

Preferred Training & Certifications

• ITIL Foundation
• CompTIA Security+
• CompTIA CySA+

Training & Certification Development

• Technical Training
• ITIL Foundation
• CCNA - CyberOps
• Cybersecurity Fundamentals (ISACA-CSX)
• CX Foundation
• CompTIA Security+
• CompTIA Cybersecurity Analyst (CySA+)
• EC Council: Certified Ethical Hacker
• Windows Admin
• Linux Admin
• McAfee Product Training
• SIEM
• EPO
• WAF
• DLP
• HIPS
• IPS/IDS
• SIEMPLIFY
• Symantec SEPM and Endpoint

Management Training

• 6 Cs of Customer Service

C. Competency

Technical Skills

(N) IP Networking

(N) Monitoring Systems

(N) Network Troubleshooting

(N) System Troubleshooting

(F) Application/Web Programming

(F) ITIL

(F) Cybersecurity Fundamentals

(F) IDS/IPS penetration and vulnerability testing

(F) Firewall intrusion detection, prevention and protocols

(F) Secure coding practices, ethical hacking and threat modeling

(F) Identity and access manager principles

(F) Application security and encryption technologies

(F) Secure Network Architecture

(F) Advanced Persistent Threats (APT), phishing and social engineering, network access, controllers, anti-malware and enhanced authentication

(F) - Familiar / 0-12 months

(N) - Novice / 1-2 years

(I) - Intermediate / 3-4 years

(A) - Advanced / > 5 years

* Waived for Trends cadetship graduates

Communication Skills

(N) Speaks clearly and can be easily understood.

(N) Expresses & speaks ideas in a logical and organized sequence.

(I) Writes clearly, concisely and effectively.

(I) Expresses ideas in a logical and organized sequence in written form.

(F) - Familiar / 0-12 months

(N) - Novice / 1-2 years

(I) - Intermediate / 3-4 years

(A) - Advanced / > 5 years

Abilities

• Must work well under pressure
• Must have good interpersonal skills
• Must be pro-active when identifying potential issues
• Must show good customer management skills

III. Working Conditions

• Must be willing to work in a shifting schedule environment.