Security Operations Centre Senior Analyst

Essential Duties and Responsibilities

Key responsibilities:

• Actively monitor security threats and risks, provide in-depth incident analysis, evaluate security incidents, will provide proactive threat research, and recommend mitigation strategies.
• Use the latest in security technology and be at the forefront of incident response to support operations at Gates locations around the world.
• Act as a core member of the Incident Response Team, triaging, responding to and reporting incidents and providing cyber security metrics.
• Evaluating and determining if/when information security violations have occurred through examination of network or device logs, open-source research, vulnerability and configuration scan data, and user provided reports.
• Demonstrate a strong understanding of information security policies and doctrine, ability to draft, modify and create SOPs for use of other team members.

Keys to Success

Knowledge of the Incident Response processes.

Able to interface with all levels of the organization both verbally and in writing.

Well-organized and can coordinate and prioritize multiple tasks simultaneously with varying deadlines.

Excellent communication, listening and facilitation skills, both written and verbal in English. 

Requirements and Preferred Skills

• BS Computer Science, Cyber Security, Info Technology (or related discipline); Grad degree in Info Assurance (or related discipline) or equivalent formal training and experience in Info Security (or min of 4 yrs experience)
• Candidates with a degree of similar level of equivalent intternational qualification (in terms of academic depth and duration) from a recognized international institution are also encouraged to apply.
• 2-4 years of experience in cybersecurity/SOC environment.
• Knowledge of cyber security standards and frameworks such as ISO 27001 or NIST CSF desired.
• Strong understanding of gen. security practices such as identity and access management (IAM), network security, server hardening, security operations, security frameworks, risk management encryption, and multi-factor authentication, security information and event management (SIEM), vulnerability management
• Demonstrated knowledge of security threats, applying actionable data to processes and procedures, correlation analysis, with an understanding of monitoring programs, such as Splunk and other SIEMs.
• Understanding of the OSI 7-layer model.
• Experience with enterprise Linux.
• Cloud experience is a big plus.