TQUKI0407_4416 - SOC – Level 2 Analyst

Required Expertise

• Minimum 5 years of experience in Security Operations and Incident Response
• Expertise in using SIEM tools (Sumo Logic), EDR, Email Security
• Responsible for providing advanced technical support and incident response

Key Responsibilities

• Utilize Sumo Logic to monitor the security environment for potential threats and incidents
• Analyze and triage security alerts generated by Sumo Logic, making informed decisions on the appropriate response
• Respond to security incidents, taking appropriate actions to contain, mitigate, and remediate security threats
• Analyze, review, and validate logs from various log sources
• Suggest use case fine-tuning and creation of new use cases
• Troubleshoot SIEM issues related to log sources
• Collaborate with SOC team members, internal and external stakeholders to resolve complex incidents
• Stay updated with the latest cybersecurity threats, trends, and technologies to improve incident response efficiency
• Document security incidents, responses, and related actions in accordance with established procedures
• Establish KPIs, review and manage security logs, and provide reports based on metrics
• Respond to client requests, concerns, and suggestions
• Track SOC performance in terms of SLAs and incident quality
• Prepare daily, weekly, and monthly reports as per client requirements

Certifications (Preferred)

• CEH, CompTIA Security+, Sumo Logic (Any of these certifications is an added advantage)