Summary
Midis Group is seeking a SOC Analyst in Doha, Qatar. The role monitors security controls, analyzes incidents and threat intelligence, and helps direct remediation and recovery efforts. Duties also include reviewing vulnerability assessments, responding to customer concerns, and configuring and improving SIEM tools. Applicants need a relevant bachelor’s degree, at least 2 years of relevant experience, and security and networking certifications.
The posting
As published on midisgroup.com. Pulled from the employer's site and shown as they wrote it.
Job Title
Engineer - SOC Analyst
Job Scope
The SOC Analyst is accountable for detecting security incidents in the SOC and translating security impacts to the wider business. S/He monitors the security control, reviews the incident tickets and leverages emerging threat intelligence to identify affected systems and scope of attack.
Main Duties and Responsibilities
- Participate in the gathering, analysis and communication of threat intelligence through the intelligence process/lifecycle;
- Apply technical skills to analyze files and related components using tools and technologies;
- Perform in-depth analysis of incidents created from L1 team;
- Understand the underlying behavior and implication on a computer and network environment;
- Respond to customer queries and concerns within a given timeline to address related concerns;
- Determine and direct remediation and recovery efforts;
- Understand vulnerability scans and review vulnerability assessment reports;
- Manage, configure and improve security monitoring tools (SIEM) among others as per client needs;
- Promote a professional image of the company and the professional services function at all times.
Position Requirements
- At least one security certificate (CEH, OSCP, CISSP, CCNP Sec, etc.);
- Any CCNP – Cisco Certified Network Professional or equivalent;
- Any non-vendor security certificate (CISSP, CISM, ISO27001, GCIA, GCIH, GCFA, GCFE, etc.);
- Understanding of log formats (LEEF, CIF…) and protocols (syslog, ftp, logfie…);
- Knowledge of security devices such as IDS/IPS, HIDS/HIPS, anomaly detection, Firewall and Antivirus systems and their log output;
- Network forensics: network traffic protocols, traffic analysis (i.e. Network flows and PCAP);
- Working knowledge of SIEM tools (such as RSA, ArcSight, Splunk and QRadar and etc.)
Education
Bachelor’s degree in Computer Science or any other related field
Experience
At least 2 years of relevant experience
#LI-AA4