SOC Engineer

” The Job Description”

1-Active participant in 24×7 operations of the SOC. This includes proactively monitoring andproviding near-real-time cyber security status and reports to enable timely decision-making for 24/7 operations.

2- Monitoring SIEM resources for any component failure.

3- Perform initial triage/investigation of alerts to identify false positives, policy violations, intrusion attempts and compromises.

4- Escalating triaged alerts to Tier II Analysts for deeper analysis and review.

5- Contribute in Incident report writing. Technical Skills.

6- Solid Knowledge of TCP/IP protocols.

7- Deep Packet and log analysis.

8- Knowledge of Windows and Linux operating systems.

9- Basic Knowledge of Network security technologies (Firewalls, IDS/IPS, WAF, Antivirus …etc).

10- Basic knowledge in SIEM technologies.

11-Basic Knowledge in threat intelligence.

12- Knowledge in Incident Handling.

13- Basic knowledge in cyber attacks. Job Qualifications.

14- Bachelor’s degree in Engineering or computer science.

15- Required 0-1 years of relevant experience.

16- Security or relevant IT certification is a plus.

17- Posses good analytical skills.

18- Good Communication skills.

19- Inquisitive.

Tagged as:

antivirus, firewalls, IDS, IPS, linux, WAF, windows