SOC L1 Analyst

• As a member of the Assystem SOC team, you will join an international and senior team in a very demanding unit
• You will be expected to learn quickly and multi-task

After the first training session, you will work with a senior SOC incident manager and your main tasks will be:

Analysis and interpretation of alerts

• Analysis and qualification of alerts from the SIEM
• Analysis of network flows from the SIEM
• Implementation of correlation rules for detectionManagement of security incidents
• Participation in incident response with experienced analysts

Monitoring

• Monitoring of threats and attack techniques (TTPs)
• Technology watch on SIEM, EDR, as we'll as tools related to intrusion detection (Sysmon, EDR, Sandbox, Threat Intel ),
• Participation in internal workshops (RETEXs, demonstrations, benchmarks, tests

Reporting and documentation

• Participation in the drafting of activity monitoring reports for customers
• Animation of customer operational committees with experienced analysts