SOC Trainee

Job Brief

Responsible for monitoring the different security systems utilized in a SOC environment to ensure the timely detection of security incidents. This position involves performing daily operational security-related tasks (monitoring, investigating, escalating, and responding)

Key Responsibilities

• Actively monitor security alerts from the SIEM and other security tools to identify potential threats.
• Perform initial analysis to assess the severity and validity of alerts.
• Escalate incidents requiring advanced analysis or response to L2 analysts or relevant teams.
• Review and analyze logs from various sources, such as firewalls, servers, and endpoints, to detect suspicious activity.
• Prepare and maintain periodic reports on security incidents and events for internal teams and stakeholders.
• Respond to customer requests for information or support regarding security incidents or events.
• Assist in maintaining SOC tools, dashboards, and processes under supervision.
• Stay informed about the latest cybersecurity threats and attack vectors.

Qualifications, Skills and Experience

Education

Bachelor Degree in Cyber Security, Computer Science, Computer Engineering or any related field

Level of Experience

Basic Knowledge (0-2Yrs) in IT security, cybersecurity, or SOC operations.

Certifications & Licensure

Essential

One or more of the following technical certificates (or equivalent):

• EC-Council Certified SOC Analyst (CSA)
• EC-Council Certified Ethical Hacker (CEH)
• CompTIA Security+

Desirable

One or more of the following technical certificates (or equivalent):

• Splunk Core Certified Power User
• Cisco Certified Network Associate Routing & Switching (CCNA)
• eCIR (Certified Incident Responder)

Tools & Systems

Essential

Basic knowledge of the following security systems

o Security information and event management (SIEM)

o Intrusion detection and prevention (IDPS)

• Good knowledge of various operating system including Windows, Linux and UNIX

Desirable

Basic knowledge of the following security systems

o Next-generation firewall (NGFW)

o Endpoint Antivirus/Antimalware

o Endpoint detection and response (EDR)

o Denial of service (DoS) attacks mitigation