
jobsDB ref: JID200003001883344
Ref perusahaan Y2
Designation: JR.ANALYST (SOC)
- The security operations centre is a team dedicated for providing first response to security incidents, and is focused on the operational aspect of web-application security: analysing the threat, suggesting immediate methods of remediation and mitigation, and actively working to block attacks in real-time.
- The scope of activity ranges throughout the layer 7 domain. Encompassing DoS & DDoS attacks, Brute-Force attacks, Scraping and filtering of unwanted traffic, and also extending into initial analysis and mitigation of application attack vectors, such as XSS, SQLi and Remote code execution.
- The SOC will work closely with the first tier support team, acting as a focal point for security related events and incidents. We are hiring professionals for project deployment and their duties and responsibilities will be as follows
Job Responsibilities:
- Monitor security technologies for alerts.
- Conduct hunts (specialized searches) for evidence of compromise.
- Tracking suspicious network, application, and user behaviour.
- Investigating breaches, gathering evidence, and analysing data.
- Manage, tune, and optimize security controls such as, NGFW, IDS/IPS, SIEM, network anomaly detection, endpoint security, vulnerability management, data loss prevention (DLP)
- Performing risk assessments.
- Write up findings and provide recommendations.
Skills Required:
- Bachelor's degree in a related field or equivalent demonstrated experience and knowledge
- Minimum 1 year in a hands-on IT role that can include either system or network administration
- Deep understanding of network and application layer protocols
- Some experience with SIEM, NGFW, and endpoint security technologies
- Excellent communication skills
- 1+ years of experience with any SIEM (Preferably LogRhythm)
- 1+ years of experience managing NGFW like Fortinet, Palo Alto Networks etc.
- 1+ years of experience with endpoint security, like Symantec, McAfee etc
- Hands-on experience in Unix/Linux and Windows administration
- Understanding of incident response procedures and practices
- Formal incident response training or certification, such as SANS
- Must be able to work weekends, evenings, and on-call
- Excellent knowledge and experience with a wide variety of IT technologies and security solutions. Day-to-day operations and interactions.
- Troubleshooting skills and experience
- Able to create excellent relationships with your customers and internally across internal teams - Systems Engineering, Marketing, Professional Services etc…
- Exemplary communication and interpersonal skills
- A willingness to be challenged and a strong desire to learn
- Fluent in English.
- Security certifications, CISSP, CISM, Security+, CEH, etc. are a added advantage. Support the SOC Manager in the preparation of SOC management and statistical reports.
- Strong foundation in Internet protocols (TCP/IP) and security concepts
- Strong ability to understand and analyse log and network packet data
- Able to perform 12-hour shift duties
If you feel that you can meet the qualification and up for the challenge, please send your complete resume and current color photograph by clicking button bellow
jobsDB akan langsung mengirimkan lamaran Anda untuk direview ke TTI GROUP DISTRIBUTION, PT
Tentang TTI GROUP DISTRIBUTION, PT
Titan Guard is a robust Managed Security Services Provider has immediate openings to work on our Managed Security Operations team. Titan Guard assists its customer and partners to improve their business operations by leveraging its industry-wide experience, expertise in cutting-edge technology and an extensive portfolio of services. We have immediate openings for Security Assessment (Pentest) and SOC team.
Ada yang mencurigakan? Silahkan lapor