IT Security Analyst (SOC L2)

Job description

Description

The Security Operation Center (SOC) is seeking a Zurich-based SOC L2 analyst. The successful candidate will have extensive experience in incident response, malware analysis, and intrusion detection. The analyst will respond to security incidents in a large and complex IT environment. The successful candidate will work closely with colleagues in Hyderabad, New Jersey, Zurich and Singapore.

Responsibilities
• Respond to security incidents (malware infections, unauthorized access, malicious emails, Distributed Denial of Service (DDoS) attacks, etc).
• Analyse malware samples to understands its characteristics and define signatures or indicators of compromise for detecting malware presence.
• Enhance and tune the SIEM and NIDS rules to identify security incidents and reduce false positives.
• Review threat intelligence and investigate indicators of compromise (IOCs).
• Maintain and update all relevant documentation (procedures, tickets, etc).
• Assist SOC L1 analysts in evaluating security events and issues, being the escalation point of contact when required.
• Define requirements for new projects, perform product evaluations and recommendations such as selecting security products and services to implement.

Requirements
• Bachelor's degree in Computer Engineering, Information Security, or equivalent.
• Several years of IT security/Information Security experience, ideally in a Security Operations Centre (SOC) of a large organization.
• Experience in incident response; possessing the ability to identify, scope, and investigate sophisticated attacks (eg APT).
• Experience in malware analysis.
• Experience in developing SIEM and NIDS rules.
• Expert knowledge of Information Security best practices.
• Advanced understanding of operating systems (UNIX/Linux and Windows).
• Advanced understanding of TCP/IP protocols.
• Ability to think critically and properly assess threat intelligence and security events.
• Knowledge of incident and problem management frameworks (eg NIST, ITIL)
• Knowledge of scripting (Perl or similar).
• Familiar with security processes in a large organization, including the definition and follow-up of standard operational procedures, incident and problem management, and change requests.
• Excellent communication skills in English.
• Security industry certifications such as GCIA, GCIH, GCFA or GREM.
• Willingness to perform on-call duties.

What we offer

UBS offers talented individuals around the world a challenging, diverse and supportive working environment in which passion, commitment and hard work are valued and rewarded.

Why UBS? Watch the video

Take the next step

Fitting in at UBS means being passionate and motivated about what you do. If you like collaborating, are used to challenging others and being challenged in return, then you have the right attitude to thrive in our environment. Want to become part of our team? Apply now.

Contact Details

UBS HR Recruiting Switzerland

Disclaimer / Policy Statements

UBS is an Equal Opportunity Employer. We respect and seek to empower each individual and support the diverse cultures, perspectives, skills and experiences within our workforce.