Associate SOC Analyst

ResponsibilitiesAct as Incident first responder for a 24/7 staffed SOCPerform security monitoring, vulnerability management, data loss / policy violation prevention and threat huntingMonitor security sensors and review logs to identify network anomalies or intrusionsProvide analysis from monitoring, research and assessment of security log data from a large number of heterogeneous security devicesEscalate security incidents using established policies and procedures in a timely mannerLiaise with Ensign customers on security intrusions, identifying root cause and recommend mitigation step(s)/ remedial action(s)Perform initial analysis of security events, network traffic, and logsAssist with the development of incident response plans, workflows, and SOPsWork directly with threat intelligence analysts to convert intelligence into useful detectionMonitoring the Managed Endpoint and Detection Response (MDR) platforms and performing analysis for notificationsPerforming Response action on Managed Endpoint and Detection Response (MDR) platforms based on standardize workflow and agreement with clients.Act as a liaison party for configured alerts to monitor performance of security sensors and toolsFulfil Change Requests, Service Requests and respond to internal / external enquiries with regards to Incident ManagementRequirementsDiploma/Degree in Information System/Information Security from a recognized institution1 year of working experience in networking environmentBasic, yet sound knowledge of network routing and switching fundamentals to include knowledge of Multiprotocol Layer Switching (MPLS)Basic, yet sound technical understanding of operating systems, network architecture and designBasic, yet sound knowledge of encryption, key management and cryptologyProven ability to plan and prioritize work, both their own and that of project teamSound understanding of organizational issues and challenges. Able to work effectively with participants at all levels in an organizationAbility to analyze problems and determine root causes, generating alternatives, evaluating and selecting alternatives and implementing solutionsPossess excellent writing skills and the ability to communicate to teammates as well as technical and executive level staffPreferred Skills /QualitiesProfessional information technology/security certifications such as ITIL, CCNA and CEH will be preferred but related qualification (i.e. GCIA, CISSP etc.) will be an advantageOther Special Working ConditionsAble to perform 12-hour shift duties (2 days’ work with 2 off-days). Working hours: AM - 8:30am to 8:30pm; PM - 8:30pm to 8:30am. Shift patterns and duration may vary from time to time