Security Analyst L3 (SOC L3)

Qualification :

• Bachelor’s Degree in Computer Engineering, Computer Science, Cyber Security, Information

Security or other equivalents

• Experience with threat hunting

• Experience in incident response handling

• Experience in consulting, including both internal and client facing experiences

• Ability to obtain a security clearance

• Experience with research, technical and business documentation and analysis

• Ability to demonstrate flexibility, initiative and innovation in dealing with ambiguous, fast-paced situations

Job Description :

• Setup and operating Managed Endpoint and Detection Response (MDR) program and proposing

enhancement to achieve better efficiency/ effectiveness.

• Operating Traffic Analytics program, identification of abnormalities in client’s

environment.

• Performs threat hunting within the clients’ technology environments to uncover indicators of

threat activities.

• Performs digital forensic preservation, legal documentation and electronic discovery for incidents

and investigations.

• Supports the development of tactics, techniques, and procedures in providing proactive threat

hunting and analysis against the available information sources (e.g. Netflow, DNS and Firewall

logs, etc.).

• Supports the identification and documentation of Indicators of Compromise (IoCs).

• Leverages internal and external resources to research threats, vulnerabilities and intelligence on

various threat actors and exploitation tools and platforms.

• Use an analytics platform to identify threats in the available information repositories.

• Perform threat research to identify potential threat vectors and work with multi-disciplines to

improve prevention and detection methods.

• Identify gaps in an organisation’s measurement metrics, telemetry and logging capabilities and

propose enhancement strategies to achieve the intended outcomes.

• Work with client’s appointed Incident Response Management team for cyber security incidents

such as data security breach, Advanced Persistent Threat (APT).