Interquest have a fantastic opportunity for experienced DV cleared SoC Analyst for a key government client working in the Defence Sector.
We are looking for individuals who can lead from the front. From a technical perspective we are using Microsoft Sentinel, Splunk and MISP Threat sharing so any knowledge of these technologies would be a substantial benefit.
Key areas of the role:
* Monitor, triage, and investigate security incidents on critical client infrastructure
* In-depth analysis of network traffic, logs, and system events to identify potential security threats and vulnerabilities
* Provide Incident Response support
* Maintain, improve and develop team knowledge of SOC tools, security operations and triage.
* Prepare reports for managed clients to both technical and non-technical audiences and continuously improve their content and presentation.
* Maintain and update security incident documentation, including incident reports, analysis findings, and recommended mitigation strategies.
Key Skill Sets
1. Demonstrable experience in Security Operations Centre
2. Demonstrable experience of Managing Microsoft Sentinel and Splunk implementations
3. Knowledge and experience with Mitre Att&ck Frameworku
4. Solid grasp of Client Server applications, multi-tier web applications, relational databases, Firewalls, VPNs, and enterprise AntiVirus product...