DESCRIERE JOB

  This role will function as a SOC Analyst. You will receive alerts/events/tickets detected by Dell Secureworks Managed Security Services and respond by performing different activities within the client’s environment;
-    In this position you will be responsible for investigating high alerts, determining the source of the threat, the extent to which client assets have been compromised, making recommendations for remediation, and assisting in the implementation;
-    Perform analysis of security events from multiple sources including but not limited to events from SIEM tools (Splunk, CTP, ArchSight, Q-Radar), network and host based IDS, firewall logs, system logs (Unix & Windows), mainframes, mid-range, applications and databases;
-    Collaborate with Line of Business technical teams for resolution and mitigation of detected issues;
-    Provide input for operational run books;
-    Routinely interact with vulnerability and threat management teams and incorporate feedback into information security applications;
-    Supervise different incident response actions with internal and external teams while owning the responsibility for the incident/event until complete closure;
-    Knowledge sharing activities: participating in Community of Practice sessions recommended by TL;


Qualification:
-    1-5 years’ experience in  IT&C;
-    Previous experience in raw log files review, data correlation, and analysis (i.e. firewalls logs, network flows, intrusion detection systems, system logs);
-    Awareness of Information Security concepts (malware, emerging threats, attacks, and vulnerability management);
-    Previous customer support experience including the resolution of customer escalations, incident handling and reporting;

Desirable Requirements

-    Industry certification from vendors (ie: Cisco, Juniper, CompTIA, ITIL, Unix, Microsoft, Oracle, AWS;
-    Experience in adjacent areas (Security Operations Center, Network Operations Center, System Administrator, Platform/Tool Support Engineer, IT Helpdesk support; 
-    Previous experience in following and procedures, step by step documentations, workflows and runbooks;


Poti aplica direct prin Adecco aici