L2 SOC Engineer

About The Position

A Security Operations Centre (SOC) Engineer is a professional responsible for monitoring, detecting, investigating, analysing, and responding to cybersecurity incidents within an organization. The primary goal of a SOC Engineer is to ensure the security and integrity of the organization's information systems and data. Here is a typical job description for a SOC Engineer. You will play a crucial role in safeguarding the organization's information systems from cyber threats. You will be responsible for monitoring security alerts, conducting incident response, and implementing security measures to protect the organization's assets.

Responsibilities

Monitor security alerts and events generated by security systems, including intrusion detection/prevention systems, firewalls, antivirus, and other security tools.Analyze and investigate alerts to identify potential security incidents.Respond to and mitigate security incidents in a timely and effective manner.Coordinate with cross-functional teams to contain and remediate security threats.Document and report incidents, including root cause analysis and recommended actions for improvement.Conduct vulnerability assessments and work with system owners to remediate identified vulnerabilities.Stay informed about the latest security vulnerabilities, threats, and mitigation strategies.Collaborate with the IT and security teams to enhance security architecture and ensure the implementation of best practices.Participate in the design and implementation of security solutions.Stay current with the latest cybersecurity threats and trends.Incorporate threat intelligence into security monitoring and incident response processes.Assist in the development and maintenance of security policies, standards, and procedures.Ensure compliance with regulatory requirements and industry best practices.Contribute to the development of security awareness training programs for employees.Promote a culture of security within the organization.

Qualification

Bachelor’s degree in computer science, Information Technology, or a related field.Relevant certifications such as CISSP, CompTIA Security+, GIAC, or others are preferred.Proven experience in a SOC environment or a similar cybersecurity role.Strong knowledge of cybersecurity concepts, tools, and techniques.Familiarity with security frameworks and standards (ISO 27001, NIST, etc.).Excellent analytical and problem-solving skills.Effective communication and collaboration skills.