Job Description:

            Tier 1 Security Analyst role monitor the real-time security alerts to determine relevancy and urgency according to documented procedures. Tier 1 creates new trouble tickets for alerts that signal an incident and require escalation to Tier 2 Security Analyst and Incident Response review. Tier 1 run vulnerability scans and reviews vulnerability assessment reports tools including received. Tier 1 receives a request change from managed security services customer and perform basic policy changing/report generation tasks as such.

Responsibilities:

• Operate in a shiftwork schedule to provides 24x7 to monitor SIEM alerts and identify potential security incidents
• Responsible for suspicious activity identification, open an incident investigation and perform preliminary investigation to validate the incident.  If the incident is determined to be more complex and requires more time and/or deeper expertise to analyses, the Tier 1 – Analyst will transfer the open investigation to Tier 2 for further analysis and escalation
• Responsible for performing basic customer request changes and basic report generation
• Follow Standard Operation Procedures (SOPs)

Qualification:

• Bachelor’s degree in science or engineering is preferable. *Welcome fresh graduate*
• Require flexibility to work nights, weekends, and/or holiday shifts
• Other relevant certifications (such as CompTIA Security +, CompTIA Network +, CompTIA CySA+ and others) desirable
• Some experience in technical analysis of computer system, network, email headers, links, and attachments to determine if an email is malicious, and then executing remediation techniques to protect the environment (Analytical and problem-solving skills are required)
• Some experience in networking or application development is preferred
• Some experience and basic knowledge in operating SIEM solutions
• Basic knowledge and/or experience with network protocols such as TCP/IP, Syslog, DNS and NetFlow is required
• Basic knowledge and/or experience with Microsoft Windows and Linux operating systems is required
• Basic knowledge and/or experience with common security tools such as anti-virus, intrusion detection and firewalls are required
• Basic knowledge and/or experience with databases is preferred
• Basic knowledge and/or experience with security vulnerability assessment tools is preferable
• Basic English reading, writing and communication skill, including conducting presentations and creating security incident reports, is required
• Passion for Cyber Security and learning