SOC Security Analyst

at  Pacific International Lines

JOB REQUIREMENTS

• Degree/Diploma in IT with 3-5 years of relevant experience in SOC operations or related information security industry.
• Relevant working experience
• Mandatory - System vulnerability assessment and testing
• Mandatory - Network vulnerability assessment and testing.
• Has a sound working knowledge of cybersecurity, including intrusion prevention, incidence response, and ethical hacking.
• Good interpersonal and communication skills (both verbal and written).
• Possesses initiative and able to work independently as well as in a team.
• Understanding of IT including multiple operating systems and system administration skills (Windows, Solaris, Unix).
• The ability to work in a high-stress environment.
• Good anticipation, analytical, and problem-solving skills.
• The ability to remain current on the latest technology and best practices in information security.

JOB RESPONSIBILITIES

As part of the Security Operation Team, you will be responsible for monitoring the security systems in our organization. The security analyst’s responsibilities include securing our online and on-premises infrastructures, filtering out suspicious activity, and finding and mitigating security risks before any breaches can occur. You will work inter-departmentally to identify and correct any flaws in our security.

RESPONSIBILITIES

• Analyst would be part of a 24x7 Cyber Security Operations to monitor cybersecurity events.
• Perform scoping for web & application vulnerability assessment
• Perform the following vulnerability assessment
• Vulnerability testing for web applications
• Cloud Infrastructure assessment
• Network Vulnerability Assessment
• Assessing the threat and risk level of the vulnerabilities identified based on their current environment.
• Provide recommendations to fix or mitigate security vulnerabilities.
• Research vulnerabilities and develop proof-of-concepts.
• Develop and execute security best practices and
• Ensure timely delivery of assessments, conveying and explaining the findings and recommending mitigations.
• Perform revalidation test to verify that the findings have been fixed.
• Providing IT security compliance check and suggestions for improving existing systems or systems that are going to be procured.
• Address audit findings and compliance issues relating to IT security.  Engaging stakeholders and users for discussions and presenting the risk involved resulting from risk assessment. Suggested and recommended mitigations to reduce the risk.
• Liaise with vendors on the security aspects of the systems.
• Follow pre-defined actions to handle security alerts and ensure all tickets logged are closed correctly and timely.
• Conduct cybersecurity phishing exercise and training
• Analyzing security breaches to identify the cause and to update incidence responses.