Security Operations Center Analyst at Tower Group

Purpose of the role:

Providing operational information technology security support to ensure that the organization is not compromised in any way. Operation support includes anti-virus, intrusion detection, key management as well as the delivery of and the content scanning of all internet mail incoming and outgoing. Ensures that all incidents are responded to, actioned and resolved. Responsible for escalating calls and the communication to the required support area and users. Conducts necessary housekeeping as required.

Key Requirements:

• Network Operations Centre (NOC) Services
• Make use of monitoring technologies including SIEM, EDR
• Maintain a detailed cause and resolutions log of customer incidents
• Leverage understanding of basic networking: TCP/IP, Ethernet
• Contribute to playbooks
• Monitor information on all network sites, analyse various network monitoring tools, and identify deterioration of components in the system
• Act as a first tier in an alert response and incident resolution
• Perform initial troubleshooting and data gathering to identify and resolve issues in an effect manner
• Maintain a detailed cause and resolutions log of customer incidents.
• Confirm network events and issues are identified and properly escalated to the relevant engineers

Security Operations Centre (SOC) Services

• Make use of monitoring technologies including SIEM, EDR, etc
• Leverage understanding of basic networking: TCP/IP, Ethernet, etc
• Maintain a detailed cause and resolutions log of customer incidents
• Monitor industry for threat trends, exploits, vulnerabilities, etc
• Participate in operational planning and Security Engineering efforts
• Contribute to playbooks
• Collaborate with the team to improve Security Operations
• Act as a first tier in an alert response and incident resolution
• Perform initial troubleshooting and data gathering to identify and resolve issues in an effect manner
• Maintain a detailed cause and resolutions log of customer incidents.
• Confirm network events and issues are identified and properly escalated to the relevant engineers
• Provide executive and detailed dashboards / reports a per the Service Level Agreements in place

Helpdesk

• Make use of monitoring technologies including SIEM, EDR,
• Maintain a detailed cause and resolutions log of customer incidents
• Leverage understanding of basic networking: TCP/IP, Ethernet, etc
• Contribute to playbooks
• Collaborate with the team to improve Security Operations
• Act as a first tier in an alert response and incident resolution
• Perform initial troubleshooting and data gathering to identify and resolve issues in an effect manner
• Maintain a detailed cause and resolutions log of customer incidents.
• Confirm network events and issues are identified and properly escalated to the relevant engineers

Qualifications / Experience

• IT Diploma or similar
• CompTIA Network+ and Security +
• 1 – 2 years’ experience in TCP/IP, Ethernet
• 1 – 2 years’ experience using SIEM and EDR