Junior Security Operations Analyst
Join a global organization’s security operations function, monitoring and investigating security events, operating defensive systems, and improving security controls. Work with users, IT teams, vendors, and external SOC partners.
Обязанности
- Triage security alerts and provide initial response to cyber incidents; investigate findings and document incident handling.
- Coordinate with the SOC and internal stakeholders, including users, IT teams, and vendors.
- Review Microsoft Defender alerts and investigate malware, unauthorized installations, unusual file sharing, and suspicious endpoint activity.
- Apply attack-surface reduction controls, hardening measures, and security policy updates; track vulnerabilities and remediation.
- Classify suspicious email, address filtering false positives, and block or allow websites and applications as needed.
- Analyze alerts involving malicious, phishing, or malware-hosting websites.
- Plan and run employee phishing campaigns and exercises.
- Conduct initial information-security reviews of vendors and support security questionnaires, confidentiality agreements, and IT procurement processes.
- Operate and continuously improve the organization’s information-security controls and systems.
Требования
- Practical experience operating information security systems or working in SOC or SecOps.
- Experience investigating and responding to security alerts and incidents.
- Familiarity with endpoint protection systems such as EDR/XDR and Microsoft Defender for Endpoint.
- Understanding of incident response principles, networking, Windows, Active Directory, and cloud services.
- Ability to analyze logs and identify unusual activity.
- Strong English, documentation, and incident-report writing skills.
- Able to work independently, manage multiple tasks, and support users and technical teams.