Description
SOC Analyst [Security Operations Centre] is required to join a prominent organization based in Belfast of Ireland.
skills Required
- Have a minimum of 3 years Information Security related experience in areas such as: Security Operations, Incident Analysis, Incident Handling, Vulnerability Management or Testing, Log Analysis, Intrusion Detection, or Firewall Administration and must be knowledgeable and have had working experience with the majority of:
- Have a minimum of 2 years' experience of one of the following: Network operations or engineering; System administration on Unix, Linux or Windows and must be able to demonstrate:
- Strong TCP/IP, networking fundamentals, and security foundational knowledge and working experience
- Working experience of Windows operating system tasks, such as installations, services, sharing, navigation, etc.
- Detailed understanding of common application layer protocols, such as HTTP, SSL, FTP and DNS.
- Any leading SIEM technologies like ArcSight, RSA Envision, Log Logic.
- Common security device functions, such as IDS/IPS, network and host-based Firewalls, DLP (Data Leakage Protection), etc.
- Possible attack activities, such as scans, man in the middle, sniffing, DoS, DDoS, etc and possible abnormal activities, such as worms, trojans, viruses, etc.
- IDS signatures, such as Snort rules
- SIEM terminology, such as threat, vulnerability, risk, asset, exposure, safeguards, etc.
- Common network device functions, such as Routers, Switches, hubs, etc.
- Event Analysis, Incident Detection and escalation to Level 3 or SOC Manager; and
Desired skills:
- Protocol Analysis experience with tools like Wireshark, Opnet, Gigiastor
- Security Certification (Including but not limited to):
- Certified Incident Handler (GCIH)
- Certified Intrusion Analyst (GIAC)
- Certified Information Systems Security Professional (CISSP)
- Systems Security Certified Practitioner (SSCP)
- Certified Ethical hacker (CEH)
- Certified Expert Penetration Tester (CEPT)
- Cisco Certified Network Associate (CCNA)
Responsibilities include (but are not limited to):
- Monitor multiple security technologies, such as IDS/IPS, syslog, file integrity, vulnerability scanners, anti-virus, and web proxies.
- Serve as an escalation point for possible security events detected by Level 1 analysts.
- Develop custom tools such as scripts or leverage existing tools in new ways.
- Specify new data correlations and analyze events using the ArcSight Security Information and Event Management (SIEM) tool.
- Contribute new or redesigned operational process and procedures for incident handling.
- Contribute new analysis techniques.
- Identify unforeseen gaps in security visibility coverage or threat exposure.
- Learn new technologies and skills like penetration testing, incident handling, security engineering & architecture, forensics, malware reverse engineering, etc in support of the enterprise security infrastructure.
Successful candidates will benefit from:
- Shift allowance
- 24x7 car parking in Belfast City Centre
- Condensed working hours - working week over four days with three days off
- Working in a state of the art Enterprise Command Centre environment, experiencing best of breed technologies
About the company
This opportunity is with one of the big IT consulting organization based in Belfast and the end client is into Auto insurance domain.
For more information about this vacancy submit your details.
GIOS Technology is acting as an employment agency in relation to this vacancy.