SOC Analyst (Security Operations Centre Analyst)

Vine Resources currently have an urgent requirement to support one of the world's largest telecoms client in the area of Security Analysis.

This is a long term contract role to based in Luxembourg requiring both the French and English language.

The main tasks of a security analyst level 2 are to:

-Review the Security Information and Event Management (SIEM) tool interface, as the tool correlates and aggregates alert data from multiple systems and device logs,
-perform an exhaustive daily analysis of events/alerts received, by prioritising events review activities,
-detect and assess alert severity and escalate to the next level or operational team as needed following guidelines
-support the next escalation level in assessing the alert
-follow-up escalated issues (mostly alerts escalated from level 1) for deeper assessment,
-follow approved events review processes and procedures
-propose improvements to events review processes and procedures
-Develop/maintain/improve SOC processes and procedures framework
-prepare review reports
-prepare activity reports
-Submit an End-of-Shift Report summarizing activities for the shift
-Respond to inbound phone (SOC line) and electronic requests

EDUCATION, KNOWLEDGE, SKILLS AND EXPERIENCE

-Mastering a recognised common body of knowledge in the field of IT security (holding a security certification such as CISSP) or become CISSP within 18 month period after starting date (training should be followed within 6 month after starting date)
-Experienced in security monitoring and/or incident handling, SANS GICH certification is a real advantage
-Security vendors or GIAC, GCIA, GCFW, GHTO, GSEC certification desirable
-University degree or equivalent experience, in a relevant subject
-Very good command of English and French (written and spoken)
-Ability to participate in meetings, good communicator
-Strong teamwork abilities
-Experience working in a process-oriented workflow environment
-Strong experience in Network Security (eg security aspects of TCPIP, Cisco Switches and Routers, Firewalls, VPN, network security scanning tools, IDS/IPS, Bluecoat proxies, reverse-proxies, WAF, Netflow, WiFi, VoIP, PKI, network incident troubleshooting and handling).
-Experience in:
-Operating Systems Security (eg Windows family, UNIX/Linux).
-Middleware and Application Security (eg Database Management Servers like Oracle or SQL Server, Web Servers
-Scripting languages (Perl, windows Scripting);