L2 SOC Analyst, Integrity360
Office located in Courbevoie, Paris
Cyber security specialists
Open for applications
Cyber security specialists
501-1000 employees
Open for applications
Office located in Courbevoie, Paris
501-1000 employees
Company mission
To be a reliable partner who can deliver effective, comprehensive solutions for organisations facing a growing number of threats to their networks, data, and reputation.
Role
Who you are
- Experience working with security event detection tools like IPS, SIEM, DLP, Anti-virus, etc
- Ability to perform event correlation, host/ network threat analysis
- Ability to manage multiple incidents and make effective decisions under high pressure environment
- Experience in performing analysis on network pcaps and documents for malicious activity or codes
- Conceptual knowledge in Networks and Network Security
- Understanding of Network infrastructure hardware and protocols (TCP/IP, switches, bridges, routers, proxy servers, VPN concentrators)
- Understanding of Security protocols (IPSec), and encryption technologies (3DES, AES, SHA2, TLS)
- Understanding of basic security principles such as Confidentiality, Availability, Integrity
- Familiar with security best practices
- A process of on-going certification for the benefit of the business and for self-development is encouraged
- Review the adequacy of the security controls and their ability to protect the information system and its information
- Experience with Splunk is a plus
- Experience using SIEM & IPS solutions is a plus
- Strong Microsoft Word & Microsoft Excel skills required
- Basic understanding or strong interest in Operational Technology (OT) environments
- Awareness of industrial systems such as SCADA, DCS, PLCs and HMIs
- Exposure to industrial protocols or networks is a plus
- Willingness to learn and develop skills in OT security monitoring
- Security industry certifications: SEC+, CYSA+, Net+, SC-200,AZ-500,AZ-900,Splunk Power user
- A working knowledge of Intrusion Prevention System (IPS), SIEM, SOAR & DLP is a nice to have
- Experience working with threat hunting tools is nice to have
- Interest in pursuing OT-related training or certifications is encouraged
What the job involves
- In this role you will be expected to analyse a range of alerts and incidents, identifying threats and attacks performed by Threat Actors ranging from cyber criminals, ATPs, and Nation States
- You will leverage various threat intelligence streams to enhance your understanding of emerging threats and vulnerabilities used by Threat Actors, providing customers with your insight and experience
- You will act as a core investigator for security incidents and alerts, escalating to senior SOC staff when a true positive has been identified
- A successful security analyst will verify security events as security incidents; correlate and collate the information; and effectively escalate their findings and recommendations internally, or to the customer
- The role requires flexibility and the ability to work as part of a wider shift pattern, additionally, there may be an on-call aspect required
- A good knowledge of Information Security is required for this role
- Proactive client services, such as compromise assessments and evaluating and recommending tools and technology for incident response are also in scope
- Demonstration of a strong comprehension of malware, emerging threats and adversary TTPs will be critical to success
- This role contributes also to the development of Operational Technology (OT) security monitoring, as part of the integration of industrial environments into our Global SOC model
- Analyse security alerts and incidents, following defined investigation processes to determine the risk they present and impact to customers
- Perform ad-hoc analysis of varied logs, identifying anomalies in customer environments
- Perform in-depth investigation on confirmed security incidents, assisting senior SOC analysts to mitigate threats
- Identify threats, perform mitigating actions to contain and eradicate threats in the environment
- Identify and document tuning opportunities for senior SOC analysts to perform
- Assist in the report creation process, performing enriching queries and investigations to help produce a high quality incident report for core stakeholders
- Assist in development of varied customer reports such as Emerging Threat reports, Incident Response reports, consistent MDR reports
- Assist in CSOC continuous improvement and development initiative to maintain and improve core processes, SOPs, and documentation
- Assist in monitoring alerts related to OT / industrial environments, following defined processes
- Support investigation of incidents involving industrial systems or OT-related activity
- Analyse anomalies in industrial network traffic or asset behavior, with guidance from senior analysts
- Contribute to incident enrichment in IT/OT convergence scenarios
- Escalate complex OT-related cases to Level 3 analysts as required
- Work in close collaboration with the Group’s OT Security Practice, leveraging their expertise for OT-related cases
Our take
Integrity360 specialises in protecting businesses from cyber threats by offering a range of services to keep computer systems safe. These include checking for vulnerabilities, responding to security incidents and managing overall cyber security.
Recently, the company acquired Grove Group, a well-established cyber security and cloud services company. This move adds around 600 new customers and opens up new locations for Integrity360. The company also strengthened its partnership with Darktrace, a key player in network security, and boosted their global presence with a new Security Operations Centre in Cape Town.
With this acquisition, Integrity360 is set to grow significantly, with hopes of increasing its annual revenue and expanding its team. This growth will allow the company to offer even better protection and support to businesses around the globe.
Steph
Company Specialist at Welcome to the Jungle
Insights
Company
Company benefits
- Flexible Working Arrangements
- Career Development Opportunties
- Health Insurance
- Pension
- Large Training & Upskilling Budget
Company HQ
Blackthorn, Dublin, Ireland
Leadership
Ian Brown
(Co-Founder & Executive Chair)Chairman at Air IT and Tailor Made Technologies. Previously the CEO of Axell Wireless, Redstone and Fastnet Group.
Eoin Goulding
(Co-Founder & Director of the Board)On the Board of Directors at Catalyst, Lesson Group and Luas Partners. Former Executive Chair and Group President of the company.
Salary benchmarks
We don't have enough data yet to provide salary benchmarks for this role.
Submit your salary to help other candidates with crowdsourced salary estimates.
Share this job
View 8 more jobs at Integrity360