Principal Consultant – SOC Specialist-ITO069343

About this role

• Relevant years experience in Cyber Security domain
• Monitoring and Incident Detection: Continuously monitoring security alerts, logs, and events from various security tools, including intrusion detection systems (IDS), security information and event management (SIEM) platforms, firewalls, and endpoint security solutions. Promptly identifying potential security incidents and anomalies.
• Incident Triage: Assessing the severity and criticality of security incidents based on predefined procedures and escalation guidelines. Prioritizing incidents for further investigation and response.
• Incident Response: Participating in incident response activities to contain, eradicate, and recover from security incidents. Collaborating with incident response teams, network administrators, and other relevant stakeholders to resolve incidents effectively.
• Threat Hunting: Proactively searching for signs of advanced threats and suspicious activities within the organization's network. Using threat intelligence and data analytics to identify potential threats that may have bypassed traditional security controls.
• Log Analysis and Forensics: Analyzing security logs and performing forensic investigations to determine the root cause and extent of security incidents. Collecting evidence for potential legal or disciplinary actions.
• Vulnerability Management: Assisting in vulnerability assessment and management activities, which may involve scanning systems for known vulnerabilities and coordinating patching efforts.
• Security Tool Management: Managing and fine-tuning security tools within the SOC, including SIEM platforms, IDS/IPS, and other security-related technologies. Ensuring the proper configuration and functionality of these tools.
• Security Awareness and Training: Promoting cybersecurity awareness among employees and end-users to help prevent security incidents caused by human error or social engineering attacks.
• Documentation and Reporting: Maintaining detailed incident reports, documenting the incident response process, and providing regular updates to management and stakeholders about the security posture and ongoing security incidents.
• Continuous Improvement: Participating in regular reviews and feedback sessions to improve the SOC's operational efficiency, incident handling processes, and security tooling.
• Threat Intelligence Integration: Incorporating threat intelligence data and feeds into the SOC's monitoring and response processes to enhance the organization's ability to detect and respond to emerging threats.
• Compliance and Policy Adherence: Ensuring adherence to security policies, industry regulations, and best practices to maintain compliance and minimize risk exposure.
  
  

• Bachelor's degree in Computer Science, Information Security, or a related field.
• Relevant certifications such as CompTIA Security+, Certified Information Systems Security Professional (CISSP), or Certified Ethical Hacker (CEH).
• Strong understanding of cybersecurity principles, incident response methodologies, and network security concepts.
• Familiarity with security tools, SIEM platforms, and network monitoring solutions.
• Analytical thinking and problem-solving skills to investigate and respond to security incidents effectively.
• Excellent communication skills to interact with various teams and stakeholders during incident response.
• Ability to work in a fast-paced environment and handle multiple incidents simultaneously.
• Continuous learning and willingness to stay updated on the latest cybersecurity trends and threats.
  
  

• Analytical thinking and problem-solving skills to investigate and respond to security incidents effectively.
• Excellent communication skills to interact with various teams and stakeholders during incident response.
• Ability to work in a fast-paced environment and handle multiple incidents simultaneously.
• Continuous learning and willingness to stay updated on the latest cybersecurity trends and threats.