استخدام senior soc analyst

توضیحات آگهی

A Senior Security Analyst is responsible for safeguarding an organization s computer systems and networks from cyber threats This role involves identifying vulnerabilities monitoring suspicious activities and implementing robust security measures
Key Responsibilities
Security Monitoring Incident Response
Triage security alerts from SIEM EDR IDS IPS and other security tools
Investigate and analyze security incidents to determine the scope impact and remediation steps
Support incident response efforts including containment eradication and recovery
Threat Hunting Intelligence
Perform proactive threat hunting activities to identify hidden threats in the environment
Analyze threat intelligence and apply findings to enhance detection and response
Develop use cases detection rules and correlation searches in SIEM
Forensics Malware Analysis
Conduct memory disk and network forensics to investigate security breaches
Analyze malware behavior and reverse engineer threats as needed
Security Automation Optimization
Develop and improve security playbooks scripts and automation to enhance SOC efficiency
Work with SOAR Security Orchestration Automation and Response to automate responses
Compliance Reporting
Ensure adherence to security frameworks MITRE ATT CK MITRE d3fend NIST
Document and report incidents investigations and security improvements
Identify recommend and implement corrective actions in response to security violations
Analyze and configure authentication and access systems to meet security architecture requirements
Required Skills Qualifications
Experience
3 years in a SOC cybersecurity or incident response role
Hands on experience with SIEM Splunk ELK etc EDR IDS IPS and firewalls
Technical Skills
Strong understanding of network protocols operating systems Windows Linux and security architectures
Proficiency in log analysis Windows Sysmon FW Audit WAF threat intelligence and attack techniques MITRE ATT CK MITRE d3fend
Experience with scripting Python PowerShell Bash and security automation
Knowledge of cloud security Azure Kubernetes and container security
Familiarity with Application Security including understanding security best practices for software development and deployment
Familiarity with threat modeling and risk management frameworks
Proven experience with incident response and mitigation of security incidents
شرکت اسنپ مارکت Snapp Market
دسته بندی IT DevOps Server
نحوه همکاری تمام وقت
نوع همکاری حضوری
مدرک تحصیلی کارشناسی
سابقه کار بیش از شش سال
حقوق توافقی
جنسیت مهم نیست
مهارت ها soc Linux Splunk siem
شهر تهران تهران