SOC Level 2/3 Analyst

SOC Level 2/3 AnalystNumer ref.: 135262

We are looking for a SOC Tier 2/3 Analyst to support our Security  Services team. As a SOC Tier 2/3 Analyst you will be responsible for  incident triage through supporting security controls. Analysts will use  SIEM technology to investigate alerts that are escalated from Tier 1,  the client, or from intelligence sources, providing technical expertise  and executing incident response steps upon confirmation of an actual  security incident. Furthermore, the SOC Tier 2/3 Analyst may be required  to both monitor and utilize third party toolsets to assist with the  identification of security threats, apply various techniques to identify  and track cyber threats and analyze various data sources related to  security events. The IBM Tier 2/3 Analyst will communicate with the  security team, architects, managers and clients on a regular basis  through various methods to ensure operational awareness.
Main tasks and responsibilities will include:

• Determine context of assigned incidents, through Incident Triage and establish its nature
• Investigation on provided Security Controls
• Cooperation with technical teams managing the infrastructure
• Support on the low-level procedure & incident matrix documentation
• Provide support on the execution of Service Requests on demand of other teams or the customer
• Provide technical expertise & support during CSIRT or security escalations
• Perform incident response during CSIRT escalations
• Propose tuning of detection rules