Job Requirements and Preferences:

Basic Qualifications:

Minimum Degree Required:
High School Diploma

Minimum Years of Experience:
1 year(s)

Preferred Qualifications:

Certification(s) Preferred:

GSEC, SEC+, Network+, Certified Incident Handler (GCIH), Certified Intrusion Analyst (GIAC), Microsoft Azure (e.g,. MS-500, AZ-900, etc.), AWS, GCP

Preferred Knowledge/Skills:

Demonstrates some abilities and/or a proven record of success with identifying and addressing client

needs:

• Security Operations Center (SOC) experience
• Networking (including the OSI Model, TCP/IP, DNS, HTTP, SMTP), System Administration, and Security Architecture;
• Incident Response Frameworks and Handling Procedures;
• Scripting language skills in Python or PowerShell;
• Vulnerability management and penetration testing of systems, applications, and networks;
• Information security, compliance, assurance, and/or other security best practices and principles; and,
• Windows, Linux operating systems logs.

Demonstrates some abilities and/or a proven record of success with:

• Working in a shift environment in the assigned shifts, with holidays aligned with client schedules;
• Participating in daily huddles, shift handovers, preparing reports or providing inputs for reports as assigned;
• Preparing materials (reports, presentations, spreadsheets, etc.) to help enable informed decision making;
• Identifying security threats, exploits, attack vectors and performing security investigations;
• Monitoring the local threat ops channels/SIEM/AV/DLP Policy violation consoles and notifying the client/stakeholders of any suspicious/malicious activity within agreed SLA timelines;
• Running a vulnerability scan as per the client schedules;
• Performing initial triage of SIEM, DLP, Host (end point) security issues and escalating based on the defined processes;
• Working with SIEMs, proxy tools, DLP, Windows, LINUX and application logs; and,
• Acquiring and utilizing knowledge on new technologies and solutions, emerging threats and vulnerabilities.