-
Perform accurate and precise real-time analysis and correlation of logs/alerts from a multitude of client devices with a focus on the determination of whether said events constitute security incidents
-
Analyze and assess security incidents and escalate to client resources or appropriate channel for additional assistance
-
Manage all customer situations in a professional manner with emphasis on customer satisfaction
-
Work with SOC operator to handle clients' requests and questions received via phone, e-mail, or an internal ticketing system in a timely and detail-oriented fashion in order to resolve a multitude of information security related situations
-
Interact with, configure, and troubleshoot network intrusion detection devices and other security systems via proprietary and commercial consoles
-
Passionate in cybersecurity
-
Professional qualifications (e.g. CCSK, OSCP, OSWE, CEH, CISSP, CISA, etc.) will be an advantage
-
Linux/Unix and Windows operating system navigation and administration, working from the command line (vs using a GUI)
-
Networking protocols and services (FTP, HTTP, SSH, SMB, LDAP, etc.
-
Identifying exploits, vulnerabilities, and network attacks
-
Packet analysis, and related tools (tcpdump, Wireshark, ngrep, etc.)
-
Using and recognizing regular expressions
-
Database queries and structures
-
Highly professional communication (written and verbal), teamwork and customer service skills -Attention to detail and great organizational skills