IPV7

Security Analyst

• Perform advanced investigations of complex alerts, correlating logs from multiple sources such as endpoints, firewalls, network devices, and cloud environments.
• Manage the incident response lifecycle, from technical containment to recommending eradication measures.
• Execute threat hunting activities, proactively searching for threats that did not trigger automated alerts.
• Administer and configure next-generation firewalls (NGFW), including access control lists (ACLs), IPS/IDS policies, content filtering, and SSL inspection.
• Manage endpoint protection platforms (EDR/XDR), including alert analysis, creation of exclusion policies, and performing remote scans.
• Analyze security logs and events in SIEM tools, creating queries and dashboards to identify attack patterns.
• Provide technical support to the Level 1 team, refining playbooks and correlation rules to reduce false positives.
• Document incidents, investigations, evidence, and post-incident technical reports (post-mortems).

SOC Security Analyst – Level 2, Investigation and Response

• Perform active monitoring of security events using SIEM platforms (such as Wazuh, Splunk, Microsoft Sentinel, or QRadar) and endpoint protection tools (EDR/XDR).
• Analyze and triage alerts generated by security tools, identifying potential incidents and reducing false positives.
• Execute initial containment actions according to defined security playbooks (e.g., host isolation or credential resets).
• Log and document incidents and activities in ITSM ticketing systems, ensuring traceability and organized information.
• Perform structured escalation of more complex incidents to N2 or N3 teams, ensuring the full investigation context is handed over.
• Track operational detection and incident response metrics and indicators.

SOC Analyst – Level 1

Analyst

• Monitor network assets and track alarms generated by monitoring tools.
• Work on resolving low- to medium-complexity logical network issues.
• Perform initial analysis and basic troubleshooting in network environments.
• Escalate and dispatch client technical teams in response to alarms or tickets.
• Contact carriers and third-party circuit providers when necessary.
• Provide customer support via phone, multichannel platforms, and other support channels.
• Document incidents, procedures, and network diagrams.
• Support analytical teams with low- to medium-complexity technical requests.
• Participate in technical, operational, and ongoing professional development training.

SOC Security Analyst – Level 2, Investigation and Response

SOC Analyst – Level 1

Monitoring Analyst – Night Shift