Level 1 Security Operations Center Analyst, Middle East

A Level 1 SOC (Security Operations Center) Analyst is responsible for monitoring and analyzing security events and alerts within customer's network and systems according to the established processes. The role primarily involves working in a 24/7 security operations environment.

‍

‍

• Monitoring and analyzing alerts from various security technologies such as SIEM (Security Information and Event Management)systems, IDS/IPS (Intrusion Detection/Prevention Systems), Firewalls, and other security tools.
• Analyzing and triaging security events and incidents to determine the nature of the threat, the level of severity, and the appropriate response.
• Conducting basic investigations to determine the root cause of security events and incidents.
• Escalating security incidents to the appropriate stakeholders and teams for further analysis and remediation.
• Documenting security incidents and investigations in a timely and accurate manner.
• Following standard operating procedures (SOPs) and responding to security incidents according to the incident response plan.
• Collaborating with other security teams, includingLevel 2 and Level 3 analysts, to investigate and resolve security incidents.

• Understanding of cybersecurity principles and best practices, including threat intelligence, network security, endpoint security, and incident response.
• Knowledge of common cybersecurity threats, such as malware, phishing, and social engineering.
• Basic understanding of networking concepts, such as TCP/IP, DNS, and DHCP.
• Familiarity with security tools, such as SIEM (Security Information and Event Management), IDS/IPS (IntrusionDetection/Prevention Systems), and vulnerability scanners.
• Strong analytical and problem-solving skills to analyze security incidents and identify potential threats.
• Effective communication skills to collaborate with other team members and stakeholders.
• Ability to work under pressure in a fast-paced environment and respond to incidents promptly.
• Relevant certifications, such as CompTIA Security+,SANS SEC401: Security Essentials, or similar certifications.