Information Security Analyst

TenX; Lahore; On-site; PKR 2,400,000 - 3,600,000; Full time

Job summary

The SOC Analyst role at TenX will monitor security alerts and incidents across endpoints and identities. You will use Wazuh SIEM, Defender, Intune, Entra ID, and Microsoft 365 Security tools to detect threats, triage alerts, and coordinate remediation.

Responsibilities include incident investigations, evidence collection, maintaining security records, and collaboration with IT teams to protect assets. A bachelor’s degree and 1 year of SOC experience are preferred.

Qualifications

• Bachelor's degree in Cyber Security, Information Security, Computer Science, IT or related discipline.
• Minimum 1 year of SOC/Cybersecurity experience.
• Security+ or ISC2 CC or equivalent certifications are preferred.

Responsibilities

• Monitor and analyze security alerts through Wazuh SIEM and perform triage, investigation, escalation and closure.
• Monitor Microsoft Defender for Business for endpoint threats, malware, and security incidents.
• Monitor Intune for device enrollment, compliance, encryption, policies, patching, and non-compliant devices.
• Monitor Entra ID sign-ins, failed logins, suspicious authentication, MFA and privileged activities.
• Support Microsoft 365 security monitoring including suspicious emails, SharePoint, OneDrive and Teams activities.
• Perform vulnerability management including CVE/CVSS analysis, prioritization, remediation tracking and verification.
• Coordinate with IT/Inventory to reconcile assets with Intune, Defender, Entra ID and Wazuh to identify unmanaged devices.
• Perform basic phishing analysis, threat intelligence, IOC analysis, and MITRE ATT&CK mapping.
• Support monitoring of Fortinet firewalls, VPN, AWS, Azure, Windows, Linux and macOS security events.
• Perform incident investigation, evidence collection, containment support, remediation tracking and documentation.
• Maintain SOC records, incident reports, vulnerability reports, security KPIs and audit evidence.

Skills

Wazuh SIEM

Microsoft Defender

Intune

Entra ID

Microsoft 365 Security

EDR

Vulnerability Mgmt

IAM

Incident Response

Phishing Analysis

Threat Intelligence

MITRE ATT&CK

MFA

Patch Management

Education

Bachelor's degree in Cyber Security or related

Job description

The SOC Analyst will be responsible for day-to-day security monitoring, alert analysis, incident investigation, vulnerability management, endpoint and identity security monitoring, and supporting overall information security operations.

Key Responsibilities

• Monitor and analyze security alerts through Wazuh SIEM and perform alert triage, investigation, escalation, and closure.
• Monitor Microsoft Defender for Business for endpoint threats, malware, suspicious activities, and security incidents.
• Monitor Microsoft Intune for device enrollment, compliance, encryption, security policies, patching, and non-compliant devices.
• Monitor Microsoft Entra ID sign-in/audit logs, failed logins, suspicious authentication, MFA, privileged activities, and account-related risks.
• Support Microsoft 365 security monitoring, including suspicious email, SharePoint, OneDrive, and Teams activities.
• Perform vulnerability management, including CVE/CVSS analysis, prioritization, remediation tracking, and verification.
• Coordinate with the IT/Inventory team to reconcile corporate assets with Intune, Defender, Entra ID, and Wazuh and identify unmanaged/missing devices.
• Perform basic phishing analysis, threat intelligence, IOC analysis, and MITRE ATT&CK mapping.
• Support monitoring of Fortinet firewalls, VPN, AWS, Azure, Windows, Linux, and macOS security events.
• Perform incident investigation, evidence collection, containment support, remediation tracking, and documentation.
• Maintain SOC records, incident reports, vulnerability reports, security KPIs, and audit evidence.

Required Technical Knowledge

• Security: Wazuh SIEM, Microsoft Defender, Intune, Entra ID, Microsoft 365 Security, EDR, Vulnerability Management, IAM, Incident Response, Phishing Analysis and Threat Intelligence.
• Networking: TCP/IP, DNS, DHCP, HTTP/HTTPS, SSH, RDP, VPN, VLAN, NAT, common ports and basic network troubleshooting.
• Security Concepts: SIEM, SOC operations, CVE/CVSS, MITRE ATT&CK, least privilege, MFA, encryption, patch management, log analysis and endpoint security.

Qualification

• Bachelor's degree in Cyber Security, Information Security, Computer Science, IT or related discipline.
• Minimum 1 year of SOC/Cybersecurity experience.
• Security+, ISC2 CC or equivalent certifications are preferred.