Job Description:Our client, a global iconic technology brand company, is recruiting for an L2 Security Operations Center Analyst, to join their business in Romania.Position TitleL2 Security Operations Center AnalystPosition TypePermanentStart DateASAPLocationBucharest, RomaniaContact:Andreea | +49 (0) 89 23 88 98 47Responsibilities:Monitor alerts and dashboards from SIEM and SOAR systems.Identify true positive hits and respond to events, alerts and incidents that could occur in the network.Review cyber security tickets escalated by L1, process, send back to L1 or escalate to L3 where required.Manage security investigations and take the lead on incident research.Perform deep dive investigations by analyzing and correlating multiple datasets.Determine the extent of events and potential impact to critical systems.Investigate and analyze threats at network and server / device level. Perform RCA.Create SIEM queries, assist L3 in the development of use cases and automation logic.Monitor SLA and KPI compliance. Take corrective actions to meet objectives.Assist L3 in Incident Response, Threat Hunting, Threat Intelligence or Vulnerability Management activities.Perform shift handovers. Generate end-of-shift reports for documentation and knowledge transfer to subsequent analysts on duty.Create and maintain documentation: SOP, process, KB. Mentor L1 team members.Work in a tiered 24x7 team, providing on-call support for L1 analysts.Qualifications:Bachelor’s degree in Network Engineering, Computer Science, Computer Information System or equivalent work experience and industry leading certifications (such as SANS, OffSec, EC Council);Ability to communicate written and verbally in Romanian and English or German.3 - 5 years’ experience as a SOC Analyst, prior L2 SOC analyst experience requiredHands on experience triaging security alerts, events, logs and artifactsMust have experience in Splunk SIEM solutions.At least 1-year hands on, extensive experience with a SORE platform, SIEM, analytics (Anvilogic/Splunk ES) andlog management toolsIn-depth knowledge of network traffic, Linux security, malware, vulnerabilities, cyber-attacks, techniques, threat vectors and security toolingHands on experience processing and triaging security alerts, events, logs and artifactsExperienced in determining the relevance and urgency of alerts and in escalating tickets.Excellent analytical and problem-solving skills as well as interpersonal skills to interact with team members, multiple stakeholders, vendors and upper management.Experience with a ticketing platform.Prior experience/expertise in: Incident Response/Forensics/Threat Hunting/Threat IntelligenceExtensive Linux and container knowledge is an advantage.Experience of working in complex, medium or large-scale IT infrastructures, preferably in the telecommunication industry.Knowledge of: ITIL Foundations, Network traffic analysis.Strong oral and written communication skills. Excellent attention to detail.Resilient and approachable with the ability to work successfully in a dynamic, fast paced environment.Ability to operate as a team player, with a flexible and positive attitude.Strong analytical and problem-solving skills. Ability to work under pressure.A self-starter, capable of working independently but comfortable and effective working in a team environment.Committed to accuracy and precision with all outcomes.Out of the box thinker that has a proactive mindset and is eager to learn.For more details contact:Quoting reference:RO_MGAT_OCA_Or call Andreea on:+49 (0) 89 23 88 98 47View our latest jobs:Follow us on twitter:@ManningGlobalIf you know of anyone within your network who may also be interested in this position, would you please forward this ‘Email & Role’ to them.Please note:That we do all we can to respond to all applications but if we have not contacted you within 2 days following your application - its likely we have not shortlisted your CV for the position.Manning Global cannot consider your application for this role if you are working for the customer we are recruiting forIf you are working for the client we are representing, but have confirmation you are leaving a permanent or contract position, please discuss this with us, so we can discuss representation with you.This email and any files transmitted with it are confidential and intended solely for the use of the individual or entity to whom they are addressed. If you have received this email in error please notify the originator of the message. Any views expressed in this message are those of the individual sender.Group Head OfficeManning Global AGHohenzollernstraße 60, 80801 Munich, GermanySitz der Manning Global AG: München, HRB 170058 Amtsgericht München, Vorstandsvorsitz: Rachael ManningMunich (DE) – Dublin (IRE) – Liverpool (UK) – Zurich (CH) - Maastricht (NL)Lille (FR) – Changzhou (CN) – New York/Houston (USA) – Zagreb (HR)Timișoara (RO) – Madrid (ES) – Istanbul (TR) – Mexico (DF) – New Delhi (India)
