Engineering Jobs at iSec

SOC level 1 Engineer 

Level 1 SOC Analyst is an operational role، focusing on real time security events monitoring and security incident investigation. As a Level 1 SOC Analyst you will actively monitor security threats and risks from different channels and escalate to higher levels. with shift basis 24*7 Monitoring، the key responsibilities are the following:

Responsibilities:

Continuously monitors security alerts queue from different channels.

Triages security alerts.

Monitors health of security sensors infrastructure.

Collects data and context necessary and escalate to higher level.

Delivers scheduled and ad-hoc reports.

Works closely with higher level teams to improve the quality of the service.

Follow all relevant departmental policies، processes، standard operating procedures and instructions so that work is carried out in a controlled and consistent manner.

Perform initial Root Cause Analysis (RCA) for the incidents.

Prepare incident reports of analysis and methodology and results of investigation.

Monitoring security events and conduct regular reviews of log files، platforms، products and services.

Academic Background:

A Bachelor degree in computer science or its equivalent is a must.

3 years’ experience in cybersecurity related field.

Fluent in English.

Certifications (CEH) or its equivalent is a plus.

Fundamental of Information Security Basis.

Good Communication Skills.

Team work spirits.

Open Vacancies: 8

SOC level 2 Engineer

SOC Analyst Level 2 will participate and be part of incident handling team in order to monitor and manage all information security incidents and risks and solve them as per the business security requirements. The SOC Analyst Level 2 will work and follow-up with the other teams to develop action plans to mitigate identified vulnerabilities and promote security initiatives.

Responsibilities:

Oversee the monitoring، identification and resolution of security events to detect threats through analysis، investigations and prioritization of events based on risk/exposure.

Respond to security incidents and report on incident handling and resolution.

Perform daily security analysis and scanning and assessment for information security risks، threats and vulnerabilities.

Proactive research to identify and understand new threats، vulnerabilities، and exploits.

Monitor the Security Information and Event Management System (SIEM) and follow up all related security incidents and events.

Configuration and administration of security systems and tools.

Tune False Positive Alerts.

Define and evaluate security technologies and applicable security controls and countermeasures and evaluate the effectiveness of the associated controls required for responding to the detected security incidents.

Provide the security recommendations on actions which assist in improving security posture within Computing incident response team center & Banks Environments.

Provide recommendations and suggestions for security use-cases.

Follow all relevant departmental policies، processes، standard operating procedures and instructions so that work is carried out in a controlled and consistent manner.

Perform initial Root cause analysis (RCA) for the incidents and update Higher Levels.

Coach Level one agents in Performing log analysis and events analysis.

Preparing incident reports of analysis and methodology and results of investigation.

Monitoring security events and conduct regular reviews of log files، platforms، products and services.

Academic Background:

A Bachelor degree in computer science or its equivalent is a must.

4-6 years’ experience in cybersecurity related field.

Fluent in English.

One of Offensive Security Courses is a must.

Open Vacancies: 2

Note:

Online or in Office interview