SOC Analyst, Ekco

• A Bachelor’s degree or equivalent in Computer Science, Computer Engineering, Electrical Engineering, Network Security, Information Security, Information
• Technology, or Mathematics (or equivalent work experience)
• Keen problem solving/ troubleshooting skills
• Strong analytical skills and a logical approach to resolving issues
• A can-do attitude
• Excellent written and verbal communication skills. You should be able to communicate technical details clearly
• The ability to adjust and adapt to changing priorities in a dynamic environment
• A pro-active approach to addressing issues and requests and the ability to multitask
• The ability to learn new technologies and concepts quickly
• Great organisational skills and attention to detail
• Adaptability to do a range of work, including the complex, non-routine, mundane and multi-environment
• Able to work under direction, use discretion and determine when to escalate issues
• Effective communication, teamwork and task-time management skills

Desirable

• Reporting to the regional Head of SOC, the role of the SOC Analyst is to apply the understanding of investigative techniques and analytical skills, to defend against and respond to cybersecurity events and incidents in our client’s IT environments
• You will support clients by ensuring they remain secure, researching new vulnerabilities and assisting with the mitigation of any potential attacks. You will work as part of a team to deliver monitoring and protection in both a reactive and proactive manner. You will also be responsible for rolling out security tools including creating documentation
• SOC Analysts at Ekco are operationally focused; they configure, secure, and monitor systems, using advanced toolsets, to prevent security breaches and to respond to incidents as they arise
• Performing accurate and precise real-time analysis and correlation of logs/alerts from a multitude of client systems
• Analysing and assessing security incidents and advancing to client resources or collaborating with internal teams for additional assistance
• Determining if events constitute security incidents e.g.: security events and incidents from SIEM, Firewall (FW), Intrusion Detection Systems (IDS), Intrusion Prevention Systems (IPS), Antivirus (AV), Directory Servers, Network Access Control (NAC) and other client data sources
• Assigning and escalating tickets in accordance with defined SLA’s
• Recommending tuning for security engineers to develop/adjust SIEM rules and reduce false positives
• Raising incidents to appropriate Seniors or Incident Response for major security issues
• Recognising potential; successful; and unsuccessful intrusion attempts and compromises thorough reviewing and analysing relevant event detail and summary information
• Using TCP/IP networking skills to perform network analysis to isolate and diagnose
• Monitor identity and access management, including monitoring for abuse of permissions by authorised system users
• Participate in cyber-security exercises and training – Blue-Teaming
• Deliver best in class customer service, communicating with clients frequently
• Responding to inbound requests via phone, emails or tickets
• Documenting actions in cases to effectively communicate information internally and to client
• Reporting common and repeat problems (trend analysis) to management and propose process and technical improvements
• Assist in providing resolution plans for system and network issues
• Providing cover in line with rotating shift patterns. You should be flexible to rotating 8, 10 or 12 hour shifts. We provide 24/7 cover to clients and shifts are allocated accordingly
• Performing other duties as assigned