Junior SOC Analyst

About Ochrestead Labs

Small enough that you will talk to clients directly in your first week. Clients are mostly credit unions, medical groups and municipal governments in Western Province.

What this job is

Our team is growing and we are hiring a Junior SOC Analyst. We need someone who writes up incidents clearly enough that the next shift can pick them up without asking. The operations team runs a 24/7 SOC. We need someone who can work through an alert queue and tell which ones matter. Remote position. Most of the team is in Colombo, but nobody is required to come in.

What you'll do

Check threat intelligence feeds and IOCs against our environment. Investigate endpoint alerts in CrowdStrike Falcon, SentinelOne or Defender for Endpoint. Escalate confirmed incidents and follow the incident response plan. Run vulnerability scans with Tenable Nessus, Qualys or Rapid7 and track remediation with system owners. Help with user access reviews and offboarding audits. Review firewall, proxy, VPN and authentication logs for suspicious activity.

About you

1-2 years in an SOC, security analyst or IT security role. Familiarity with the MITRE ATT&CK framework. Basic scripting in PowerShell or Python. Understanding of TCP/IP, DNS, HTTP and common ports and protocols. Must be able to pass a background check.

Nice to have

KQL or SPL query writing. SOAR platforms such as Splunk SOAR, Cortex XSOAR or Tines. Malware analysis in a sandbox.

Perks and benefits

Compensation: LKR 140,000-LKR 160,000 a month

Medical insurance for you and your family. Company laptop. Learning budget. Internet allowance. Flexible hours. EPF and ETF contributions.

Start: Immediately.

Demo job created on 11jobs for testing and demonstrations. It is not an actual opening at Ochrestead Labs.