SOC - Level 2 Cyber Security Analyst

Job description

Position Summary Reporting to the SOC Team Leader, the technical responsibilities of the Level 2 Cyber Security Analyst include advanced qualification of security events, in-depth investigations, incident handling, security research, as well as limited content development work. To continually support the client mandate, some non-technical responsibilities of the Level 2 Analyst role are to provide input into existing processes and workflows as well as suggest future documentation needs. The Level 2 Analyst is also expected to provide mentoring and guidance to Level 1 analysts in support of team growth and development. Responsibilities and Duties: Primary Responsibilities and Duties: Qualify SIEM incidents reported by Level 1. Investigate beyond the depth and technical expertise expected of Level 1. Perform incident response and report findings to customers. Handle incident escalations from Level 1. Qualify and escalate security incidents to our customers based on the incident severity. Perform Security research to suggest SIEM use-cases and refine investigation methods. Suggest improvements to the current SIEM content. Communicate directly with customers during meetings or escalations. Define or update processes and other documentation. Secondary Responsibilities and Duties: Guide and mentor Level 1 Cyber Security Analysts. Quality Control (detections/tickets). Assist with the training of Level 1 analysts. Qualifications and Skills: Ideally, working experience in the Security Operations Center or other cybersecurity team Intermediate knowledge of SIEM (ideally Microsoft Sentinel, XDR and Google SecOps) and/or IPS-related technologies is a mandatory skill. Strong analytical & technical skills. Ability to develop hypotheses for security events using limited, ambiguous, or conflicting information. Ability to lead and communicate efficiently within a team environment. Good English skills (both written and verbal). Professional certifications such as CCNA, CEH, SANS GCIA or GCIH, eCTHP, eCDFP are a bonus/plus Education: (Preferred) Bachelor of Science degree in Computer Science, Computer Engineering, Information Technology or equivalent. 1+ years working within the information security field, with emphasis on security operations, incident management, intrusion detection, and security event analysis. Knowledge of technical writing and documentation, and the ability to map processes and procedures back to roles and responsibilities within the organization. Great customer service skills. Our Benefits: Vacation: 5 days above the standard length set by the Labour Code PTO: 5 days (nr of days times nr of shift hours = 40 or 37,5 hours) Meal tickets Flexipass Pension plan