Security Operations Centre Analyst Level 2
Job Profile Summary:
Join us to create the giants in the industry
At Derivco, we believe that our people are not just employees – they are the heart and soul of our business. It's their skills, expertise, and passion that define who we are and drive us towards excellence every day.We empower our people to think creatively, push boundaries, and take ownership of their work. We don't just want employees; we want innovators and difference-makers who are ready to make an impact.
Culture is at the core of everything we do. We create an environment where our people can thrive, grow, and unleash their full potential. We provide the right tools, support, and opportunities for personal and professional development.
We are currently looking for a Security Operations Centre Analyst Level 2 to join our team in Malaga!
Role Overview: Provide dedicated eyes on glass monitoring and analysis capability for SOC operations. The engineer will also conduct analysis of security events to include validation, escalation and reporting of events of interest based on the guidelines and event handlers provided to them.The SOC Engineer will be responsible for all such events of interest and will make sure they are continuously monitored and reviewed.
Job Description:
Key Responsibilities:
- Further investigates the behaviors detected when the SOC Tier 1 analyst escalates an incident
- Adds context to the incident to understand the behavior, analyzing data from multiple tools and data sources
- Participates in crisis management by supporting the incident manager and all SOC analysts
- Creates reports and visualizations of security attacks
- Tracks trends for metrics and reports
- Works to reduce false positives
- Maintains detection rules database
- Checks external feedback from other teams on a daily basis and applies results effectively
- Obtain feedback from shift team weekly and assist where possible to address points of frustration
- Oversee that all security tools are working properly.
- Services monitored will include but are not limited to SIEM, Splunk, IDS/IPS, firewall, web application firewall, data loss prevention (DLP), DAM, ePO.
Key Qualifications and Experience:
- Degree in Information Technology, Computer Science or other relevant field of study.
- 2 - 5 years in Security Operations, Cybersecurity or other relevant work experience.(Additional experience may be required in the absence of the preferred qualification / certification).
- Starting balance of 25 days annual leave
- Bonus scheme
- Company pension scheme
- Company’s Life Assurance
- Private Healthcare
- EdenRed card with monthly food allowance
- Gym membership
- Dental Cover provided by Cigna
Derivco is an equal opportunities employer.
We value people as individuals with diverse opinions, cultures, lifestyles and circumstances and we are committed to equality of opportunity and to providing a productive working environment free from unfair and unlawful discrimination.