Compliance, Reporting and Documentation:

• Participate in security audits and assessments, providing evidence of SOC activities and controls.
• Maintain accurate records of all events handled, including triage notes and escalation details.
• Support the delivery of incident and vulnerability summaries to the management team and customers as part of Service Reviews or Security Working Groups.
• Participate in post-incident reviews and help document lessons learned.
• Assist in ensuring compliance with industry standards, regulations, and internal security policies.
• Contribute to the preparation of regular reports and metrics on SOC operations and overall security posture.

Vulnerability Management:

• Assist in monitoring and managing vulnerabilities across live service using various vulnerability management tools.
• Support compliance with patching policies by tracking vulnerability status and helping to coordinate remediation efforts.
• Providing regular updates on vulnerability status to the wider SOC team and other stakeholders.
• Contribute to Remedial Action Plans by documenting actions taken and tracking remediation progress.
• Work with third parties to respond to advisories and directives for critical vulnerabilities in a timely manner.

Collaboration and knowledge sharing:

• Work closely with other Service Operations teams (e.g., Network, Architecture, and Development teams) to identify and resolve security issues.
• Share insights, threat intelligence, and incident learnings to improve the overall security posture of the organization.

Continuous Improvement:

• Identify and suggest improvements to SOC processes, playbooks, and tools based on hands-on experience and incident handling.
• Contribute to the development and documentation of SOC procedures, ensuring they are clear, accurate, and up to date.

Education and Experience Requirements

Experience (preferred)

• 6 months to 2 years of hands-on experience in a SOC or similar security environment.
• Graduates or career changers with lab experience, internships, or home lab projects are encouraged to apply.

Education:

• Bachelor’s degree in Computer Science, Information Security, Cyber Security or related field, or equivalent experience desirable.

Certifications (preferred):

• Any SIEM-specific certification or vendor-specific training.
• Relevant cybersecurity certifications such as Certified Cloud Security Professional (CCSP) or other relevant security certifications, BTL1 or others are highly desirable but not essential.

Technical Skills:

• Familiarity with SIEM tools (e.g., LogRhythm, Elastic SIEM, Microsoft Sentinel, or similar).
• Basic understanding of network protocols, firewalls, intrusion detection/prevention systems (IDS/IPS), and endpoint security.
• Exposure to or understanding of log analysis and alert triage, vulnerability scanning and patching and incident response.
• Knowledge of cyber security and compliance frameworks (NIST, ISO 27001, MITRE ATT&CK).
• Understanding of network protocols, malware analysis, threat intelligence, and vulnerability management.
• An understanding of and an interest in learning scripting and automation for security operations.

Soft Skills:

• Strong written and verbal communication skills.
• Analytical thinker with good attention to detail and sound judgement.
• Able to follow standard operating procedures with discipline and accuracy.
• Eager to learn, ask questions, and develop professionally.
• Comfortable working in a fast-paced team environment and handling multiple alerts.
• Participate in on-call or out-of-hours technical support where appropriate and supported by senior staff.