SOC Analyst

2022-03-08 | po-020983

Company description

Leading Payments service with the mission to spread trust through society and to give people room to dream. Company offers instant, monthly-consolidated credit to consumers by removing hassles from payment and purchase experiences.

Responsibilities

1. Assist IR leader in all phases of incident response life cycle: preparation, analysis, containment, eradication, remediation, recovery, and post-incident activity.

2. Support threat hunting in both on-premises and cloud environments.

3. Socialize incident response processes such as playbooks and reference guides.

4. Stay up to date on external threat intelligence sources related to zero-day attacks, exploit kits and malware to determine organizational risk and improve threat detection by incorporating into detection tools.

5. Assist IR leader in forensics: host-based disk and memory as well as network; analyze to determine root cause and impact.

6. Assist in the design, evaluation, and implementation of new security technologies.

7. Proactive coordination with appropriate departments during a security incident – management, legal, security, operations, and others.

8. Creating thorough reports and documentation of all incidents and procedures; presenting ﬁndings to IR lead and other stakeholders as necessary.

Requirements

1. Proven track record of supporting incident response/management programs on AWS

2. Experience in a Managed Security Services provider or inhouse SOC.

3. Experience with automation of tasks (e.g., scripting)

4. Experience in Forensics (collecting artifacts), malware analytics or reverse engineering.

5. Minimum of 2 years’ experience in threat hunting, pentesting, or threat analysis on AWS.

6. Experience identifying, investigating, and responding to complex attacks on AWS and on premises environments.

7. Strong understanding of threat landscapes in terms of the tools, tactics, and techniques of threats employing both commodity and custom (e.g., MITRE ATT&CK)

8. Experience with attack emulation (e.g Safebreach)

9. Knowledge and experience with containerized services.

10. Network and web-related protocol knowledge (e.g., TCP/IP, UDP, IPSEC, HTTP, HTTPS, routing protocols)

11. Familiar with Atlassian products, Git, and CI/CD pipelines.