Security Analyst

As a **Level 1 Cyber Defense Operations Center (CDOC) Analyst** at METRO Global Solution Center (MGSC), you will monitor security solutions with a focus on **SIEM, SOAR, and XDR technologies**. Your responsibilities include:

• Daily security monitoring, alert triage, and coordinated incident response to ensure real-time threat detection.
• Enhancing SIEM/SOAR/XDR alert use cases and threat detection capabilities.
• Researching emerging threats, vulnerabilities, and attack techniques to strengthen defenses.
• Collaborating with cross-functional teams to improve threat detection and response maturity.
• Maintaining detailed incident records, supporting audits, and ensuring compliance with regulatory standards.
• Promoting best practices, updating SOP, and sharing knowledge on new findings.
• Ensuring alignment of detection and response processes with organizational and compliance requirements.
• Staying updated on evolving threats and technologies to refine SOC capabilities.
• Supporting asset inventory and ownership mapping for comprehensive monitoring coverage.

**Technical & Soft Skills Required:**

• Proven hands-on experience with SIEM (e.g., Google Chronicle), SOAR, and XDR tools (e.g., CrowdStrike, Splunk).
• Strong knowledge of endpoint security (EDR: CrowdStrike, Defender, Cortex), DLP, and MDM.
• Deep understanding of MITRE ATT&CK, NIST CSF, and cyber kill chain concepts.
• Familiarity with network security, operating systems, and hybrid cloud environments (On-Prem, Cloud, VDI).
• Compliance expertise with NIST CSF and ISO 27001.
• Strong organizational skills, ability to prioritize tasks, and work under pressure during critical incidents.
• Research, analysis, and documentation skills for professional reporting (PowerPoint, policies, procedures).
• Excellent communication and stakeholder collaboration abilities.

**Qualifications:**

• Bachelor’s degree in Computer Science, IT, Cybersecurity, or related field (Master’s or certifications like Security+, CEH, GCIH preferred).
• 2–4 years of experience in SOC roles within large multinational organizations or MSSPs.