Junior Security Analyst - Siem

Duties and Responsibilities:

• CSE new rule prototype reviews
• Integration of data sources into SIEM
• CSE Rules audit which includes regular SIEM maintenance
• Asist with deployment of security best practices
• Yara rules review & creation
• CSE Rule tuning including correlation searches
• Perform threat-hunter related activities to identify gaps within the environment
• Work on identifying assets on the web through attack surface management
• Configuration of ATP rules into SIEM
• Work on security alerts to identify issues
• Testing of SIEM rules to ensure accuracy and effectiveness
• T/S SIEM related issues such as with data collection, FER’s, log parsing
• SIEM optimization to enhance threat detection accuracy
• Kept up to date on security related events and taking appropriate measures
• Work on SIEM related data from an analysis standpoint
• Creation of custom search queries to perform in-depth investigations
• SIGMA rules review & creation
• Audit dashboard creation

Required Skills:

• Good organizational skills
• Ability to notice patterns within data
• Experience handling SOC related alerts
• Self-motivated and able to work without high levels of supervision
• Good attention to detail and a strong analytical mind
• Experience working with SIEM