Professionals at Ackcent Cybersecurity have a common goal: to improve the security of our customers, protect their assets from cyber threats, and provide high-quality service through communication and care.
Position Overview
You will be part of our SOC Team responsible for security threat monitoring and incident handling. Your role will involve securing and defending our clients' assets. We seek professionals with experience in cybersecurity, with a broad and deep understanding of Networks, Security Architecture, and Security Monitoring Tools.
As a key team member, you will lead security threat and incident handling, improve and maintain tools and procedures, and conduct forensics and malware analysis for mitigation and threat containment. In this senior role, you will also train and support junior team members and collaborate with other departments on security initiatives.
Key Responsibilities
1. Analyze and verify security threat monitoring alerts to identify, classify, and prioritize incidents.
2. Create, improve, and maintain security monitoring alerts based on data correlation.
3. Operate and maintain IDS/IPS systems, working closely with security and network architects.
4. Lead responses to security incidents and investigations, coordinating with customers and IT providers, adhering to SLAs.
5. Conduct forensic and malware analysis to identify indicators of compromise, evaluate incident scope and impact.
6. Report findings to the SOC Manager and the involved CISO/CIO.
7. Train and advise junior team members.
8. Perform proactive research on the latest security threats and vulnerabilities to keep tools and processes current.
9. Ensure contractual obligations and SLAs are met or exceeded.
10. Manage priorities, deadlines, and deliverables.
11. Develop and improve SOC tools and operational procedures.
Required Skills & Experience
* Degree in Computer/Telecommunications Engineering or related discipline.
* Over 3 years of relevant experience in information security.
* Experience working in a SOC environment.
* Strong understanding of network fundamentals and Internet protocols.
* Knowledge of system administration and security architecture.
* Experience with security monitoring tools (Firewall, IDS/IPS, HIDS, WAF, SIEM).
* Experience or knowledge of at least one IDS technology.
* Scripting skills in Bash, Python, or PowerShell.
* Fluent in English, both written and spoken.
* Self-motivated, able to work independently and collaboratively in challenging environments.
Nice to Have
* Proficiency with Windows, Unix/Linux, and OSX OS architectures.
* Knowledge of Windows Server administration.
* Understanding of cybersecurity landscape, including kill chain, TTP, Threat Intelligence, malware networks.
* Knowledge of security concepts like defense in depth, BYOD management, data loss prevention, risk assessment, and security metrics.
* Over three years in a SOC environment.
* Strong analytical, problem-solving, communication, and leadership skills.
* Experience with AWS or Azure infrastructure.
* Previous malware reverse engineering experience.
* Relevant certifications (GCIH, GCFA, GCFE, GREM, CISSP) are a plus.
What We Offer
* Competitive salary
* Medical insurance
* Remote work
* Birthday off
* Flexible working hours
* Dynamic, innovative, collaborative environment
This is a full-time position in the IT Services and Consulting industry.
#J-18808-Ljbffr