Required a SOC Operator & Analyst - Relocation.
* Relocation to Zambia for 3 years.
scan the alerts to determine relevancy and urgency.
Creates new trouble tickets for alerts.
Redirect incidents for Analyst (Tier 2) response.
Run vulnerability scans and review vulnerability assessment reports.
Manage and configure security monitoring tools.
Sort out trouble tickets generated by the operator (Tier 1)
Assess the scope of the affected systems and of the attack.
Collect asset data on these systems for further investigation
Determine as for the remediation and recovery efforts.
Inspect asset discovery and vulnerability assessment data.
Find ways to identify stealthy or data leakage threats.
Cary out penetration tests on production systems to validate resiliency and identify areas of weakness to fix.
Advise how to optimize security monitoring tools based on threat hunting discoveries.
Requirements:
Sysadmin knowledge (Linux/Mac/Windows).
Programming experience.
Familiarity with security tools as FW, SIEM, IDS, IPS.
Knowledge of Checkpoint FW, Arcsight, Zenoss, Mcafee EPO , qRadar etc.
Familiarity with Investigation tools: PEiD, Sysinternal, WinSCP, b64dec, ILDASM, putty, Wireshark.
Familiarity with penetration testing tools (as kali server).