Follow detailed operational process and procedures to appropriately analyse, escalate, and assist in remediation of critical information security incidents.
Correlate and analyse events using the Splunk/Log Rhythm/Qradar SIEM tool to detect IT security incidents.
Conduct analysis of log files, including forensic analysis of system resource access.
Review customer reports to ensure quality and accuracy.
Monitor multiple security technologies, such as SIEM, IDS/IPS, Firewalls, Switches, VPNs, and other security threat data sources.
Respond to inbound requests via phone and other electronic means for technical assistance with managed services.
Respond in a timely manner (within documented SLA) to support, threat, and other cases.
Document actions in cases to effectively communicate information internally and to customers.
Resolve problems independently and understand escalation procedure.
Maintain a high degree of awareness of the current threat landscape.
Participate in knowledge sharing with other analysts and writing technical articles for Internal Knowledge Bases.
Perform other essential duties as assigned.
Able to work in rotating shifts within a 24/7 operating environment.
Bayt
Beware of fraud agents! do not pay money to get a job
MNCJobsGulf.com will not be responsible for any payment made to a third-party. All Terms of Use are applicable.