SOC analyst (2+ years of experience)

Job description

Triplecyber is hiring a SOC analyst (2+ years of experience) to join our team on a full-time basis. The office is located in Tel-Aviv and the role is daily shifts 5 days a week (no night shifts).

Responsibilities

Investigate alerts, anomalies, errors, intrusions, malware, etc. to identify the responsible, determine remediation, and recommend security improvements

Monitor and investigate alerts using Microsoft Security Tools (e.g.M365, Cloud App Security, Azure, Defender for Endpoints, Azure Security, Azure Sentinel and XDR)

Monitor and investigate alerts leveraging EDR solutions

Review security events that are populated in a Security Information and Event Management (SIEM) system

Analyze a variety of network and host-based security appliance logs (Firewalls, NIDS, HIDS, Sys Logs, etc.) to determine the correct remediation actions and escalation paths for each incident

Determine the nature and extent of problems being reported by tools, e-mails, alerts, etc.

Review vulnerability assessment reports.

Manage and configure security monitoring tools

Open tickets and assigning them to Tier II or other Security Operation teams after eliminating false positives;

Responsible for working in a 24×7 Security Operation Centre (SOC) environment;

Integrate and share information with other analysts and other teams

Determines remediation and recovery efforts.

Qualifications

Experience: A minimum of two years in a SOC role, demonstrating a strong background in security operations.

Broad understanding of information security, with a focus on applicative and infrastructural threats and weaknesses.

Advanced knowledge of communication infrastructures and organizational systems.

Incident Response: Ability and experience in investigating information security incidents.

Familiarity with offensive security, including knowledge of diverse attack methods and techniques.

Recognition of diverse security controls and monitoring, with the ability to analyze malicious files.

Knowledge of Linux/Mac/Windows;

Advantage - military's experience in the field of cybersecurity.

Programming skills (Python, Ruby, PHP, C, C#, Java, Perl, and more)