Security Operations Centre Analyst Level 2

Job Profile Summary: At Derivco, we work alongside our clients who are considered giants in the industry, to create and develop the platform that hosts some of the best online casino games in the industry. We are also Platinum partners with vendors such as Microsoft and we are proud to say we employ over 2,500 of the brightest minds across our offices in the USA, South Africa, UK, Spain, Malta, Sweden and Australia. To work for Derivco means you will work with cutting-edge technology., in our designer offices. Our people are brilliant., our ideas fresh and our technology is trailblazing. You will be inspired, challenged, and stimulated every day and you will receive an extraordinary number of high-fives - rewarded for work well done. A place where you will feel as if you have found your intellectual and creative home. **_ Sounds pretty awesome, right?_** Derivco is an equal opportunities employer. We value people as individuals with diverse opinions, cultures, lifestyles and circumstances and we are committed to equality of opportunity and to providing a productive working environment free from unfair and unlawful discrimination. **Job Description**: The job function is to provide dedicated "eyes on glass" monitoring and analysis capability for SOC operations. The analyst will conduct analysis of security events to include validation, escalation, and reporting of events of interest, based on the guidelines that event handlers provide to them. The SOC Analyst will be responsible for these events of interest and will make sure they are continuously monitored and reviewed. **Experience**: - Investigates deeper on the detected behaviors when an incident is escalated by the SOC level 1 analyst - Add context to the incident to understand the behavior, analyzing data from multiple tools and data sources - Participates to the crisis management by providing support to the incident handler and all SOC analysts - Create reports and visualizations of security attacks - Tracks trends for metrics and reporting - Works on the decrease of false positives - Maintain the detection rules database - Get feedback from the shift team on a weekly basis and assist where possible to address points of frustration - Monitoring that all Security tools are working properly - Services monitored will include, but are not limited to SIEM, Splunk, IDS/IPS, Firewall, Web Application Firewalls, Data Loss Prevention (DLP), DAM, ePO **General Skills**: - Security Operations Center (SOC) environment experience with at least 5 years of overall experience with 3 years of IT and include 2+ years of related SOC and incident monitoring experience a MUST. - Experience with SIEM, Splunk, IDS/IPS, Firewall, Web Application Firewalls, Data Loss Prevention (DLP) and Security Event Correlation. - Excellent analytical and problem-solving skills. - Experience with technical writing. - Possess an understanding of security standards and risk management. - Have excellent written and verbal communication skills. - Possess the ability to adjust and adapt to changing priorities in a dynamic environment. - Be able to multi-task and be pro-active in addressing issues and requests. - Possess technical acumen and the ability to understand and interpret technical specifications. - Rigorous and respectful of process. Strong attention to details. - Strong time management skills with the ability for multitasking. - Information Security and operational oriented mind-set. - Knowledge of security policies for information systems. - Autonomous and self-organized. **Monitoring Management**: - Handles escalations effectively, ensuring a mínimal number of duplicate escalations created - Reports back on identified trends that may be forming and/or proactive actions taken to reduce spam - Updates inaccurate and add missing knowledge base documents where required **Perks of the Job**: - Health Insurance Allowance - Company bonus structure - Gym Allowance - Mobile Allowance - Free lunches daily in the office - Ongoing learning & development - A host of opportunities to explore new ideas & technologies and grow your career.