Soc Analyst-Teilzeit
Vereinigte Staaten Von Amerika
* Participating real, ongoing Security Operation Center (SOC) Shifts* Conduct core information security activities: Security Information & Event Management (SIEM), Threat Intelligence, Vulnerability Management, Education & Awareness, Malware Detection, Incident Response (CIRT,CSIRT), Network Monitoring and Log Analysis. Monitor and analyze Security Information and Event Management (SIEM) logs and alerts through SIEM und EDR Systems (Splunk, IBM QRadar, SentinelOne, Crowdstrike) and identify security incidents for remediation and investigation. * Recognize potential, successful, and unsuccessful intrusion attempts and compromises thorough reviews and analyses of relevant event detail and summary information from security tools and technologies to develop IDS/IPS, Firewall and SIEM rules.* Analyze malware and virus attacks incidents and find details of the infected Windows hosts, identify indicators of compromise (IOCs), prepare incident reports to determine impact and scope of the malicious activities and recovery of the system and data. * Analyze phishing incidents, develop phishing/vishing scenarios and contribute to the administration of phishing assessment program, including deploying assessments and report generation.https://cybernowlabs.com/index.php
