Security Operations Center Analyst

Sygnia is looking for a SOC Analyst to join their team of cybersecurity analysts monitoring services, tier 2. The role includes development of detection analyses, triage of alerts, investigation of security incidents, proactive threat hunting and enhancement of sensors and overallvisibility status. The suitable candidate should be a team player with previousexperience in SOC, SecOps or security monitoring, independent, and with a “can-do” attitude.

Responsibilities:

• Work across all areas of Sygnia’s SOC to include continuous monitoring and analysis, threat hunting, securitycompliance, security event auditing and analysis, rule development and tuningand forensics.
• Solving security incidents underdefined service level agreements and objectives.
• Prioritize and differentiatebetween potential incidents and false alarms.
• Addressing clients’ inquiries viaphone, e-mail, and live chat.
• Work side by side with customersproviding insightful incident reports.
• Work very closely with your peer& higher Tier analysts to make sure your analysis meets the qualitystandards.
• Identify opportunities forimprovement and automation within the MXDR Operation Lead and lead efforts tooperationalize your ideas
• Identify and offer solutions togaps in current capabilities, visibility, and security postureCorrelateinformation from disparate sources to develop novel detection methods

Requirements:

• 1 year of experience in a SOC/MDRor Managed EDR service, night and weekend shifts as well
• Strong analytical thinking,problem-solving mindset and independency.
• Independent, bright and positiveanalyst, who strive for excellency, and able to succeed in a dynamicenvironment.
• Basic understanding of the lifecycle of advanced security threats, attack vectors and methods of exploitation.
• Hands-on experience working withSIEM technologies. (e.g. Splunk, QRadar, ArcSight, Exabeam, etc.)
• Good familiarity of common dataand log sources for monitoring, detection and analysis (e.g., Event Logs,Firewall, EDR).
• Strong technical understanding ofnetwork fundamentals, common Internet protocols and system and securitycontrols.
• Familiarity of system andsecurity controls, including basic knowledge of host-based forensics and OSartifacts.
• Proficient knowledge andexperience with scripting (e.g., Python).
• Familiarity with cloudinfrastructure, web application and servers – an advantage.
• FluentEnglish (written, spoken) – a must. Spanish – an advantage.

We regretthat only shortlisted candidates will be notified.

EALicense No.: 08C3209

RegistrationNo.: R1101742