Responsibilities :

• Continuously monitor security alerts and events using SIEM tools like Splunk.
• Use SPL (Search Processing Language) to create and refine searches to identify suspicious activities.
• Analyze logs, network traffic, and other data sources to detect potential security incidents.
• Use SQL and database skills to query and analyze data related to vulnerabilities.
• Perform Level 1 and Level 2 SOC duties, including initial triage, in-depth analysis, and escalation of incidents.
• Participate in shift rotations to ensure 24/7 coverage of security monitoring.
• collaborate with other SOC analysts and teams to ensure effective incident handling and knowledge sharing.
• Generate reports and dashboards in Splunk to provide visibility into security operations.
• Use Excel to analyze data and create detailed security metrics and incident reports.
• Develop PowerPoint presentations to communicate security findings and strategies to stakeholders.

Required Skills :

• Bachelor’s degree in computer science, Information Systems, or another related field.
• Experience with SPL and use of Splunk.
• Coding experience or knowledge, preferably in Python and/or R.
• Knowledge of SQL and database experience.
• Proficiency in Microsoft Office applications, especially Excel and PowerPoint.
• Knowledge of Level 1 & 2 SOC operations.
• Cyber kill chain/incident response.
• SOC experience.
• Programming experience-python.
• Public speaking skills.