SOC L2 Analyst

Key Responsibilities

• Support and guide the teams performing Cyber Security monitoring, to enhance their monitoring, triage investigation processes capabilities prior to escalation
• Leverage detection and response solutions in place, to further assess any escalated potential incidents
• Continuous improvement of Axiata GSOC Cyber Incident detection, contextualization, and response processes, leveraging automation and orchestration where possible
• Manage and coordinate potential incidents escalations, for investigation, along with any required internal or external stakeholders
• Communication and coordination of Cyber Security Incident response actions with Operational Companies (OpCOs) of Cyber Security Incidents are within SLA
• Analysis of Threat Intelligence, ensuring prevention, detection and response capabilities setup is maximized against those new threats
• In depth analysis of malware or other potential malicious processes or software identified in the organization
• Coordination of Cyber Security testing activities, and providing advice on remediation
• Develop, document, and maintain SOPs and knowledge base for cyber security services including incident response, intelligence analysis, evidence acquisition, forensics recovery, and others
• Continuous knowledge improvement in tools and best practices in Cyber Security threat monitoring and incident response, including contextualization and automation
• Evaluate new emerging Cyber Security technologies and make recommendations for adoption within GSOC

Person Specifications

Experience and Qualifications

• Minimum 4 years working experience in Cyber Security Incident Management
• Diploma/Degree from Information Technology or equivalent discipline
• Certification such as GCIH, GSEC, CySA+, CompTIA +, CSX (P), CASP and CEH will be added advantage

Knowledge and Technical Skills

• Excellent knowledge of Advanced Persistent Threats, attack tools, techniques, and methods used by adversaries
• Excellent knowledge of penetration testing services and techniques
• Excellent written and verbal communication skills and ability to perform working under pressure (IT Security Incidents) 
• Experienced in multicultural and regional teams' management and coordination
• Ability to define, prioritize and execute process in a structured manner