Job Summary:
We are seeking a skilled and experienced Cyber Security Analyst to join our Security Operations Center team. The ideal candidate will be responsible for monitoring, detecting, and responding to security incidents, ensuring the integrity and confidentiality of our network and data. This role requires a strong technical background in cybersecurity and the ability to work collaboratively in a fast-paced environment.
We are looking for both senior level and junior level. fresh graduates with passion and knowledge in cyber security are welcome.
Key Responsibilities:
- Strong troubleshooting skills and responsible for Problem Solving.
- Manage project deployment lifecycle, define requirements, design systems, support testing and oversee live implementation.
- Oversee the testing and monitoring of hardware and systems performance.
- Provide assistance with systems planning, business information analysis and process improvement initiatives.
- Support staff and end user with resolution of systems issues, malfunctions or hardware problems.
- Worked closely with customers on the technical requirements to provide technical solutions – Identified requirements, including technical details sufficient for product definition.
Technical Requirements:
Incident Detection and Response:
- Monitor security alerts and investigate potential security incidents using various security tools and platforms.
- Analyze and respond to security incidents, including malware infections, network intrusions, and data breaches.
- Perform initial triage, containment, eradication, and recovery of security incidents.
Threat Investigation and Analysis:
- Conduct in-depth analysis of security incidents to identify potential security risks and vulnerabilities.
- Analyze network traffic, system logs, and other data sources to identify anomalous activity.
- Develop and refine detection rules and signatures to improve the accuracy of security monitoring.
Reporting and Documentation:
- Document security incidents, findings, and actions taken in incident management systems.
- Prepare and deliver detailed incident reports and recommendations for remediation.
- Collaborate with other teams to implement security controls and improvements based on incident findings.
Continuous Improvement:
- Stay updated on the latest cybersecurity trends, threats, and technologies.
- Participate in post-incident reviews and contribute to lessons learned and process improvements.
- Provide guidance and mentorship to junior team members.
Qualifications:
- Passionate in the field of cyber/Network Security.
- Candidate must be quick learner, hard worker, multitasker, Good English, have good communication skill and presentation skill.
Education:
- Bachelor’s degree in Computer Science, Information Security, or a related field. Equivalent work experience may be considered.
Experience and technical skills:
- 1+ years of experience in a SOC or similar security-focused role.
- 3+ years of experience in a SOC or similar security-focused role. (for senior level)
- Proven experience with incident detection, response, and analysis.
- Excellent knowledge with forensic analysis and malware analysis techniques (MITRE ATT&CK, etc.).
- Excellent knowledge and experienced with security tools such as SIEMs, IDS/IPS, endpoint protection, and threat intelligence platforms.
- Excellent knowledge of TCP/IP-based services, including DNS, DHCP, TFTP, SSH, SMTP, etc.
- Excellent knowledge of internet routing protocols (RIP, OSPF, BGP, EIGRP, IGRP, etc.).
- Excellent knowledge of Firewall/IDS/IPS/WAF and monitoring tools.
- Excellent knowledge of reading and analyze Wireshark PCAP.
- Proficiency in scripting languange (Bash, Python, YAML, etc.).
- Familiarity with linux and unix.
- Exposure with network and security equipments
Certifications (Preferred):
- Certified SOC Analyst (CSA)
- Certified Information Systems Security Professional (CISSP)
- Certified Incident Handler (GCIH/E|CIH)
- Certified Ethical Hacker (CEH)
- Other relevant security certifications.
Soft Skills:
- Strong written and verbal communication abilities.
- Ability to speak and present reports.
- Ability to work effectively under pressure and manage multiple priorities.
- Strong teamwork and collaboration skills.
