Job Opportunities API

Position Summary Reporting to the SOC Team Leader, the technical responsibilities of the Level 2 Cyber Security Analyst include advanced qualification of security events, in-depth investigations, incident handling, security research, as well as limited content development work. To continually support the client mandate, some non-technical responsibilities of the Level 2 Analyst role are to provide input into existing processes and workflows as well as suggest future documentation needs. The Level 2 Analyst is also expected to provide mentoring and guidance to Level 1 analysts in support of team growth and development. Responsibilities and Duties: Primary Responsibilities and Duties: • Qualify SIEM incidents reported by Level 1. • Investigate beyond the depth and technical expertise expected of Level 1. • Perform incident response and report findings to customers. • Handle incident escalations from Level 1. • Qualify and escalate security incidents to our customers based on the incident severity. • Perform Security research to suggest SIEM use-cases and refine investigation methods. • Suggest improvements to the current SIEM content. • Communicate directly with customers during meetings or escalations. • Define or update processes and other documentation. Secondary Responsibilities and Duties: • Guide and mentor Level 1 Cyber Security Analysts. • Quality Control (detections/tickets). • Assist with the training of Level 1 analysts. Qualifications and Skills: • Ideally, working experience in the Security Operations Center or other cybersecurity team • Intermediate knowledge of SIEM (ideally Microsoft Sentinel, XDR and Google SecOps) and/or IPS-related technologies is a mandatory skill. • Strong analytical & technical skills. Ability to develop hypotheses for security events using limited, ambiguous, or conflicting information. • Ability to lead and communicate efficiently within a team environment. • Good English skills (both written and verbal). • Professional certifications such as CCNA, CEH, SANS GCIA or GCIH, eCTHP, eCDFP are a bonus/plus • Education: (Preferred) Bachelor of Science degree in Computer Science, Computer Engineering, Information Technology or equivalent. • 1+ years working within the information security field, with emphasis on security operations, incident management, intrusion detection, and security event analysis. • Knowledge of technical writing and documentation, and the ability to map processes and procedures back to roles and responsibilities within the organization. • Great customer service skills. Our Benefits: • Vacation: 5 days above the standard length set by the Labour Code • PTO: 5 days (nr of days times nr of shift hours = 40 or 37,5 hours) • Meal tickets • Flexipass • Pension plan