Position Summary
Reporting to the SOC Team Leader, the technical responsibilities of the Level 2 Cyber Security Analyst include advanced qualification of security events, in-depth investigations, incident handling, security research, as well as limited content development work. To continually support the client mandate, some non-technical responsibilities of the Level 2 Analyst role are to provide input into existing processes and workflows as well as suggest future documentation needs. The Level 2 Analyst is also expected to provide mentoring and guidance to Level 1 analysts in support of team growth and development.
Responsibilities and Duties:
Primary Responsibilities and Duties:
- Qualify SIEM incidents reported by Level 1.
- Investigate beyond the depth and technical expertise expected of Level 1.
- Perform incident response and report findings to customers.
- Handle incident escalations from Level 1.
- Qualify and escalate security incidents to our customers based on the incident severity.
- Perform Security research to suggest SIEM use-cases and refine investigation methods.
- Suggest improvements to the current SIEM content.
- Communicate directly with customers during meetings or escalations.
- Define or update processes and other documentation.
Secondary Responsibilities and Duties:
- Guide and mentor Level 1 Cyber Security Analysts.
- Quality Control (detections/tickets).
- Assist with the training of Level 1 analysts.
Qualifications and Skills:
- Ideally, working experience in the Security Operations Center or other cybersecurity team
- Intermediate knowledge of SIEM (ideally Microsoft Sentinel, XDR and Google SecOps) and/or IPS-related technologies is a mandatory skill.
- Strong analytical & technical skills. Ability to develop hypotheses for security events using limited, ambiguous, or conflicting information.
- Ability to lead and communicate efficiently within a team environment.
- Good English skills (both written and verbal).
- Professional certifications such as CCNA, CEH, SANS GCIA or GCIH, eCTHP, eCDFP are a bonus/plus
- Education: (Preferred) Bachelor of Science degree in Computer Science, Computer Engineering, Information Technology or equivalent.
- 1+ years working within the information security field, with emphasis on security operations, incident management, intrusion detection, and security event analysis.
- Knowledge of technical writing and documentation, and the ability to map processes and procedures back to roles and responsibilities within the organization.
- Great customer service skills.
Our Benefits:
- Vacation: 5 days above the standard length set by the Labour Code
- PTO: 5 days (nr of days times nr of shift hours = 40 or 37,5 hours)
- Meal tickets
- Flexipass
- Pension plan
