Job Description
- Assist with monitoring security alerts and events from SIEM tools and other monitoring systems under supervision
- Assist with reviewing logs and alerts from firewalls, IDS/IPS, antivirus, EDR, and email gateways, and report suspicious activity to analysts
- Support initial triage of security alerts and escalate potential incidents in line with defined escalation paths
- Assist with analyzing reported phishing emails and suspicious user activity
- Assist with health checks of monitoring tools and report visibility gaps or tool failures
- Support the preparation of incident tickets, investigation notes, and daily and weekly reports
- Stay informed of emerging threats and vulnerabilities, and use threat intelligence under guidance
- Participate in shift handovers, training, and job shadowing, and follow defined SOPs and confidentiality requirements
Person Specification
- Currently pursuing or completed a Bachelor's degree in Cyber Security or a similar IT field
- Basic understanding of security monitoring, networking, and operating system concepts
- Eagerness to learn and develop security operations skills
- Good communication and teamwork skills
- Willingness to work in shifts as required
- Locations
- Colombo, Western Province, Sri Lanka
- Education
- bachelor degree
- Experience
- No experience required