IT Security Operation

IT Security Operation (Middle)

Security Monitoring & Incident Response:

• Monitor, analyze, and detect cyber security threats, vulnerabilities, and incidents across the organization's infrastructure.
• Handle initial triage, investigation, and escalation of security alerts (L1/L2 Support).
• Respond to security incidents and coordinate remediation efforts to minimize business impact.
• Maintain and review security logs (SIEM, firewall, EDR, and network traffic) to identify suspicious activities.

Operations & Maintenance:

• Support the maintenance and optimization of security tools and operational dashboards.
• Participate in routine security assessments, vulnerability scanning, and patch verification.
• Document security incidents, perform root cause analysis (RCA), and prepare comprehensive incident reports.
• Assist in conducting regular security audits and compliance checks.

What Capabilities You’ll Need (Requirements)

• Experience: 3–4 years of experience in IT, with a strong foundational background in SOC, Helpdesk, Network Operations (NOC), or IT Support.
• Education: Bachelor's Degree in Computer Science, Information Technology, Cyber Security, or a related field.
• Technical Knowledge: Basic understanding of networking protocols (TCP/IP, DNS), operating systems (Windows/Linux), and common security concepts (firewalls, IDS/IPS, EDR).
• Certifications: Having relevant training or professional security certifications is highly preferred (e.g., CEH, CompTIA Security+, CCNA Cyber Ops, or equivalent training certificates).
• Analytical Skills: Strong analytical and problem-solving skills to investigate anomalous behavior and security alerts.
• Soft Skills: Good communication skills and the ability to collaborate effectively during incident response.