Position: SOC Analyst
Category: Security
English level: fluent
Years of experience: 5


- Worked in a 24/7 Security Operations Center.

- Generated and maintained operational process and training documentation.

- Investigated malicious phishing emails, domains and IPS using open-source tools and make recommendations on proper blocking based on analysis.

- Stay up to date with current vulnerabilities, attacks, TTPs and countermeasures with security blogs and internal news reporting platforms.

- Monitored identity and access management, including evaluating abuse of permissions by authorized system users.

- Analyzed Firewall, Email, DNS, WAF logs from customer computing platforms, network elements, and security devices to identify and mitigate intrusion attempts in customers' environment. (ELK Stack)

- Researched new and evolving threats and vulnerabilities with potential to impact the monitored environments.

- Continuous monitoring and analysis of security events using SIEM. (ArcSight ESM, LimaCharlie, Splunk)

- Applied advanced analytic tools to determine emerging threat patterns and vulnerabilities.

- Evaluated customer data, performed system/network inventory, configuration management, operational ticket submission, request tracking, and problem resolution activities.

- Performed shift handoff at the end of every shift to provide situational awareness to the incoming shift handlers.