SOC Analyst Intern: Hands-on Security & Incident Response

Safeaeon; Gilgit Division; On-site; PKR 900,000 - 1,500,000; Full time

Job summary

Safeaeon in Pakistan is seeking a SOC Analyst to monitor security events, investigate incidents, and respond to alerts across endpoints and networks. You will work in a 24x7 rotating shift and use detector tools to identify threats.

The role involves documenting incidents, generating reports, onboarding clients, and configuring their environments, while staying updated on vulnerabilities and new security technologies such as MDR and SIEM.

Responsibilities

• Evaluate critical security incidents using detection tools
• Investigate event alerts and logs from multiple endpoints
• Analyze and co-relate logs from the firewall, IDS/IPS, AVs, O365, etc
• Work in a 24x7 pro-active environment and respond to security alerts
• Document and report incidents/offenses to the clients
• Use Endpoint detection tools to detect malware across the client s environment
• Maintain and send monthly, weekly reports and other client-specific documentation
• Work on industry standard SIEM solutions to analyze incidents and create complex indexed searches
• Using analytical skills to whitelist False Positives incidents
• Keep yourself updated on security news/vulnerabilities and compose a set of Use Cases. Use basic scripting knowledge to automate processes
• Onboarding new clients from scratch and configuring their network environment
• Identifying compromised Endpoints by analyzing payloads/logs and notifying clients
• Work on latest security technologies, including Email filtering, Compliance and Patch management, Syslog management, MDR, and SIEM.

Job description

Safeaeon in Pakistan is seeking a SOC Analyst to monitor security events, investigate incidents, and respond to alerts across endpoints and networks. You will work in a 24x7 rotating shift and use detector tools to identify threats.

The role involves documenting incidents, generating reports, onboarding clients, and configuring their environments, while staying updated on vulnerabilities and new security technologies such as MDR and SIEM.