SOC Analyst

at  Philips

JOB DESCRIPTION

The Security Operations Centre (SOC) consists of a 24/7 incident response capability. The SOC Analyst’s main objectives are to contribute following a multidisciplinary approach to the key SOC operational tasks: security incident detection, monitoring and response, content delivery.

Incident Detection & Response:

• Manage security incidents to conclusion
• Perform forensic investigations

Monitoring:

• Proactively identify potential cyber security threats, based on understanding “normal” activity

Content Delivery:

• Develops content, such as scripts, use cases for SIEM, queries for log management or automated data gathering for forensics.
• Perform anomaly detection and malware hunting
• Creation of overall situational awareness, combining outputs to be further used by the SOC

Maintaining Relevance:

The cyber threat landscape is constantly evolving, and SOC teams need to be able to manage the latest threats to the organization.

• keeping current with new and trending attacks
• ensuring that SOC tooling has an updated set of rules to help detect such attacks.

Please refer the Job description for details