L2 Security Analyst

Specialized Technical Services

Duties and Responsibilities:

Provide 24x7 monitoring (shift based), analysis and alerting of IT Security events and incidents.

Analyze security events to verify incidents and their potential impact and risk to the clients.

Create tickets for incident alerts and prioritize, correlate, and analyze events and incidents.

Prepare and share incident analysis form to initiate response to validated events by engaging the required teams or resources to address the security incidents

Analyze recurring incidents and performance of existing systems, processes, people and ensure corrective actions are taken.

Proactive monitoring and respond to known and emerging threats against the network.

Whitelist and fine-tuning content (use-cases) on SIEM solution.

Threat hunting by identifying and hunting for emerging threat activities across all internal and external sources

Perform complex data analysis in support of security event management.

Conducting detailed & comprehensive investigation and triage on wide variety of security events and implement cleanup and remediation processes.

Participation on Incident Response that includes root cause and lessons learned.

Participation in the development of new logic and analytical capabilities.