IT SOC (Security Operations Center)

Requirements:

1. Have min 3-year experience in Cyber Security or at least 1-year of working as a L2 SOC.
2. Responsible for working in a 24x7.
3. Have min certification Splunk Power User, ECSA and ECIH or equivalent.
4. Have depth knowledge of Security and Network.
5. Have depth knowledge and concept cyber-attacks and techniques, threat vector, risk, and incident management.
6. Have good knowledge of various operating system like Windows, Linux, Unix etc...
7. Have good knowledge about various SIEM Splunk and Security Perimeter Device and Tools.
8. Have good Documentation and Reporting Incident.
9. Have experience Threat Hunting.
10. Have experience Regular Expression (Regex).
11. Have experience create Splunk Dashboard, Use Case and Policy related with alert/issue/vulnerability and other security issue.
12. Have experience create knowledge base/Playbook/Guideline for investigation process and every SOC process activity.
13. Can performed evaluation false positive alert/issue/.