Job Description
CCDS is a leading provider of Information Technology and cybersecurity solutions. We are currently seeking a Saudi Level 1 Security Operations Center (SOC) Analyst to join our vibrant team. In this entry-level position, you will be responsible for supporting the daily operations of our Security Operations Center. You will monitor, analyze, and respond to security alerts and incidents to help protect our organization's critical information and technology assets. This is an excellent opportunity for those starting their career in cybersecurity.
Responsibilities
A Level 1 SOC Analyst is primarily responsible for the initial triage, analysis, and escalation of security incidents. Their day-to-day tasks typically include:
- Monitoring Security Alerts:
- Continuously monitor security information and event management (SIEM) systems, intrusion detection/prevention systems (IDS/IPS), and other security tools for alerts and anomalies.
- Identify potential security threats and vulnerabilities based on alerts generated.
- Initial Alert Triage and Analysis:
- Categorize and prioritize security alerts based on severity and potential impact.
- Perform preliminary analysis of alerts to determine whether they are true positives or false positives.
- Gather initial information about security incidents, including affected systems, users, and network activity.
- Incident Escalation:
- Escalate confirmed security incidents to Level 2 or higher analysts, providing relevant context and information.
- Follow established incident response procedures and workflows.
- Basic Security Event Logging and Documentation:
- Accurately record all security events and actions taken in ticketing systems and incident logs.
- Maintain detailed and organized records of security activities.
- Threat Intelligence Gathering:
- Stay updated on emerging threats, vulnerabilities, and security best practices.
- Assist in gathering and correlating threat intelligence data from various sources.
- Security Tool Maintenance:
- Assist with the maintenance and basic operation of security tools.
- Report any issues or malfunctions with security systems.
- Creating and Updating Documentation:
- Contribute to the development and maintenance of security documentation, such as incident response plans and standard operating procedures.
