Browse
Employers / Recruiters

Incident Triage Analyst

ssc-egypt · 19 days ago
Negotiable
Full-time
Apply

1. Provide communication and escalation throughout the incident per the Security Incident Management process.

2. Prioritize and differentiate between potential intrusion attempts and determine to treat the alert as a security incident and assign a severity level to apply proper mitigation based on the severity.

3. Collect contextual information to close or escalate the security incident to the Incident Response function for further investigation to find the root cause.

4. Provide consistent and accurate incident feedback to Incident Monitoring, support forensic, event documentation and malware analysis as required to maintain the integrity of the investigation.

5. Monitor and analyse network traffic, security events and logs for Intrusion Detection Systems/ Intrusion Prevention Systems (IDS/IPS), Firewalls, Email Security Gateways, File integrity monitoring, DB Monitoring, Proxy solutions, Windows Event Logs, AIX/Linux systems logs, Application Logs, Endpoint security solutions, Data Leakage prevention solutions.

6. Identify false positives and work with appropriate team members for alert tuning.

7. Perform quality review of tickets for documentation accuracy and validation of ticket context.

8. Support in the daily, monthly, Quarterly and Yearly security posture, Security Operations Center (SOC) and executive reporting and dashboards.

9. Develop tools or scripts to automate repeatable tasks, to streamline manual process, in order to support security investigation.

10. Enhance detection capabilities by providing recommendations for security monitoring devices such as IDS/IDS and Security Information & Event Management (SIEM).

11. Proactively reviewing raw logs for anomalous activity from different sources.

12. Participate in evaluating and recommending security solutions to ensure catering for logging and monitoring requirements in any system to fulfil SOC core objectives.

13. Work with Threat Intelligence to write and improve Runbooks and update documentation.

14. Monitor all log sources heart beat and report/investigate issues to ensure maintaining healthy logs to avoid any failure of data collection and impacting the core SOC monitoring function.

15. Follow all relevant department policies, processes, standard operating procedures and instructions so that work is carried out in a controlled and consistent manner.

16. Follow the day-to-day operations related to own jobs in the department to ensure continuity of work.

Requirements

§ Bachelor’s degree of Engineering, Computer Science or equivalent.

§ Minimum of 5 - 7 years of experience in IT Security and related disciplines.

§ Experience in analyzing security logs

§ Experience with enterprise security architecture and software such as Web Applications Firewalls, Next Generation Firewalls, email sandboxing, etc

§ Experience in configuring and implementing technical security solutions, application security platforms, sandboxing, and similar technologies.

§ Good experience with packet analysis tools

§ Good experience with OSs+ (Widows and Linux)

§ Recommended Certifications

o Certified Intrusion Analyst (GIAC)

o Certified Forensic Analyst (GCFA)

§ Mandatory Certificates

o EC-Council Certified Security Analyst (ECSA)

Skills:

§ Very good command of English and Arabic language

§ Good communication skills

§ Good Analytical skills

Last updated on Mar 24, 2024

See more

About the company

More jobs at ssc-egypt

Analyzing

Dubai, Dubai

 · 

30+ days ago

Cairo, Cairo Governorate

 · 

30+ days ago

Cairo, Cairo Governorate

 · 

30+ days ago

Cairo, Cairo Governorate

 · 

30+ days ago

Cairo, Cairo Governorate

 · 

30+ days ago

More jobs like this

Analyzing

Cairo, Cairo Governorate

 · 

30+ days ago

Suez, Suez Governorate

 · 

30+ days ago

Cairo, Cairo Governorate

 · 

30+ days ago

System Analyst
S
strategicgears

Cairo, Cairo Governorate

 · 

30+ days ago

Cairo, Cairo Governorate

 · 

30+ days ago

Developed by Blake and Linh in the US and Vietnam.
We're interested in hearing what you like and don't like! Live chat with our founder or join our Discord
Changelog
🚀 LaunchpadNov 27
Create a site and sell services based on your resume.
🔥 Job search dashboardNov 13
Revamped job search UI with a sortable grid, live filtering, bookmarks, and application tracking.
🫡 Cover letter instructionsSep 27
New Studio settings give you control over AI output.
✨ Cover Letter StudioAug 9
Automatically generate cover letters for any job.
🎯 Suggested filtersAug 6
Copilot suggests additional filters above the results.
⚡️ Quick applicationsAug 2
Apply to jobs using info from your resume. Initial coverage of ~200k jobs in Spain, Germany, Austria, Switzerland, France, and the Netherlands.
🧠 Job AnalysisJul 12
Have Copilot read job descriptions and extract out key info you want to know. Click "Analyze All" to try it out. Click on the Copilot's gear icon to customize the prompt.
© 2024 RemoteAmbitionAffiliate · Privacy · Terms · Sitemap · Status