Operational Engineer Level 2 – CSOC positions available for seasoned professionals to contribute to an advanced cyber threat detection and response operation.
As an Operational Engineer Level 2 – CSOC, your role is to lead and oversee Cybersecurity incident analysis, activity monitoring and investigations within a shift. You will handle advanced incidents and service requests and guide Level 1 engineers to provide expertise in complex troubleshooting scenarios. You will also coordinate with escalation engineers on the investigation and resolution of critical cybersecurity incidents as well as ensure accurate triage, timely escalation, and resolution within SLAs.
This role is on-site and based on shift rotation within a 24x7 Operation.
- Address escalated incidents and service requests.
- Guide Level 1 engineers in troubleshooting and ensure timely resolution of escalated issues.
- Maintain clear documentation of complex incidents.
- Monitor external threat data sources to maintain accurate cyber network defence threat conditions and determine which security issues may have an impact on the enterprise.
- Perform a detailed analysis of cyber threat adversaries and recommend preventative countermeasures.
- Assess and identify Advance Persistent Threat (APT) activities.
- Maintain and support the shift log for effective shift handover.
- Monitor and review triage activities performed by the L1 analysts and ensure accurate closure.
- Assist in creating playbooks and updating the knowledge base repository.
Specific knowledge and skills for the role of Operational Engineers Level 2 CSOC
-Advanced Threat Analysis: Proficiency in conducting in-depth analysis of advanced threats, including malware reverse engineering and understanding sophisticated attack techniques.
-Security Automation and Orchestration: Ability to leverage automation tools and orchestration platforms to streamline and enhance incident response processes.
-Forensic Analysis: Expertise in forensic analysis techniques to investigate and trace the source of security incidents, including analysing system logs and digital artefacts.
-Vulnerability Management: Skill in identifying and assessing vulnerabilities in systems, networks, and applications, and collaborating with teams to implement effective remediation strategies.
- Leadership and Mentoring: Ability to lead and mentor junior analysts, providing guidance during incidents, sharing knowledge, and contributing to the continuous improvement of the CSOC team.
