Cybersecurity Defense Senior Specialist - SOC L2

Company Overview:

Advanced technology and cybersecurity company (sirar) established by stc, the regions ICT and digital services provider, sirar by stc is a cutting-edge cybersecurity provider that empowers organizations to take control of their cyber capabilities and digital environments.

As experts in business security and privacy, we offer a comprehensive range of solutions that help you to operate online safely, securely, and efficiently. The tools we provide help organizations detect and prevent cybersecurity attacks, safeguard their digital future, and provide protection and security from that point forward.

Key Responsibilities:

1. Correlates information from multiple sources to understand the situation and determine the effectiveness of an observed attack.
2. Analyzes network alerts from multiple sources to determine possible causes.
3. Provides timely detection, identification, and alerting of possible attacks, anomalous activities, and misuse activities and distinguishes them from benign activities.
4. Analyzes malicious activity to determine vulnerabilities exploited, exploitation methods, and effects on system and information.
5. Determines tactics, techniques, and procedures (TTP) for intrusion sets.
6. Examines network topologies to understand data flows through the network.
7. Identifies indications and warnings through research, analysis, and correlation across multiple data sets.
8. Isolates and removes malware.
9. Uses network traffic to reconstruct malicious activity.
10. Develops and maintains information security metrics.
11. Reports suspected cyber incidents in line with the organization's cyber incident response plan.
12. Participates in handling tickets for subscribed customers on required alerts.
13. Contributes to the overall success of the company by performing all other duties and responsibilities as assigned by the line manager.

Qualifications:

1. Bachelor's degree in Cybersecurity, Computer Science, Information Technology, or related discipline.

Professional Certifications Preferred:

1. Certificate in CEH/ECIR/CSA/CTIA/GCFE/GCIA/GMON.

Years of Experience:

1. 3 - 5 years of relevant experience.

Skills:

1. Intermediate proficiency in recognizing vulnerabilities in security systems.
2. Intermediate proficiency in using intrusion detection technologies to detect host and network-based intrusions.
3. Intermediate proficiency in effectively recognizing and categorizing types of vulnerabilities and associated attacks.
4. Intermediate proficiency in assessing security controls based on cybersecurity principles and tenets.
5. Intermediate proficiency in effectively performing root cause analysis for cybersecurity issues.