SOC TRAINEE

Role Overview: As a candidate for the position, your role will involve learning to navigate and interpret security documentation, including incident response plans, standard operating procedures (SOPs), and security policies. You will be required to acquire knowledge of fundamental cybersecurity principles, such as threat vectors, attack techniques, and common vulnerabilities. Additionally, you will need to familiarize yourself with incident handling procedures, including initial assessment, containment, eradication, and recovery steps. Your responsibilities will also include leveraging threat intelligence feeds and sources to enhance threat detection capabilities within the SOC. Key Responsibilities: - Monitor security incidents in 24x7 rotational shifts. - Detect incidents by monitoring the SIEM console, rules, reports, and dashboards. - Ensure incidents are reported as tickets using the ticketing tool and handled as per the defined SLA for each customer. - Monitor the SIEM console resources to identify any anomalies. - Recognize potential, successful, and unsuccessful intrusion attempts/compromises through review and analysis of relevant event detail and summary information. - Commit to continuous self-improvement by exploring additional cybersecurity resources, online courses, and certifications. - Report confirmed incidents to customers/L2 team as necessary. - Track incident status to closure as per defined Standard Operating Procedures (SOP). - Perform first-level triage of events as provided in SOP and automate analysis if possible. - Monitor the health of the SIEM tool and create incidents for the engineering team's action. - Assist L2 analysts in incident workflow when requested. Qualifications Required: - Basic knowledge of Linux and Windows process commands. - Basic knowledge in Networking/Cybersecurity. - Understanding of any SIEM tool is an advantage. - CEH/CCNA certification will be a plus.,