Posted 2y ago

Security Analyst

@ Infor
Philippines
RemoteFull Time
Responsibilities:Analyzing detections, Coordinating tickets, Gathering OSINT
Requirements Summary:3 years in a SOC;Experience with vulnerability tools, SOAR, EDR/XDR, SIEM; knowledge of Windows/Linux logs; AWS; OSINT; overnight shift; weekend/holiday rotation.
Technical Tools Mentioned:Vulnerability management tools, SOAR, EDR, XDR, SIEM, Windows, Linux, AWS
Save
Mark Applied
Hide Job
Report & Hide
Job Description
Position Summary:

The responsibilities of a SOC Analyst include: analyzing and triaging detections in our security tools, liaising with the Global Services Help Desk to resolve end user tickets, containing and escalating security incidents, and gathering and reporting OSINT. SOC Analysts collaborate with Infor teams globally to drive activities focused on the continuous maturity of Infor’s SOC team and Incident Response program.


As a SOC Analyst, you’ll join Infor’s Information Security Office SOC Team to proactively identify threats and mitigate attacks on Infor’s global enterprise application systems. 

This position is for the overnight shift with a rotation for weekends and holidays to provide a 24x7x365 support model.


What You Will Need:

Basic Qualifications:

3 years of experience as a security analyst in a SOC environment
Practical experience using vulnerability management tools, SOAR, EDR/XDR, SIEM
Practical knowledge of network security, threats, and vulnerabilities
Practical experience with and understanding of Windows and Linux operating systems and event logs
Fundamental knowledge of SaaS/Cloud architecture (AWS)
Practical experience with incident detection and response processes, security best practices
Basic understanding of OSINT processes
Sense of urgency
Willingness to learn 
Ability to work overnight shift with weekend and holiday rotation


What Will Put You Ahead?

Preferred Qualifications:


CompTIA CySA , Security , GIAC GISF, EC-Council CSA



A Day in The Life Typically Includes:

Analyzing EDR detections and taking appropriate action
Coordinating with Infor Global Help Desk and end users to resolve tickets
Researching trending threat campaigns, attack vectors, and TTPs
Gathering and reporting OSINT on pertinent threats and vulnerabilities 
Partnering with the IR team during security incidents for incident response, investigation, and recovery of systems