Onepoint

Security Operations

• Monitor security events within the 24×7 SOC.
• Provide rapid analysis and response to detected threats.
• Handle cybersecurity alerts and incidents escalated by Tier 1 SOC analysts.
• Analyze and qualify security alerts, including phishing, account compromise, malware, and lateral movement cases.
• Perform advanced analysis and recommend appropriate actions.
• Contribute to the initial incident response in collaboration with the relevant teams.
• Participate in the continuous improvement of SOC processes, detection rules, and metrics.
• Provide guidance to management within the scope of the role.
• Correlate events from SIEM, XDR, EDR, identity, email, network, and cloud platforms.
• Enrich alerts using logs, indicators of compromise, and threat intelligence.
• Determine the verdict, severity, potential impact, and required actions.
• Recommend or initiate initial mitigation, containment, or escalation measures.
• Rigorously document investigations, findings, decisions, and actions taken.
• Perform first-level technical analyses of endpoint and network logs and artifacts.
• Support and mentor Tier 1 SOC analysts in handling complex cases.
• Contribute to improving detection rules, investigation queries, SOC runbooks, and playbooks.
• Use approved artificial intelligence and automation tools to support investigation triage, enrichment, and documentation.
• Perform any other related duties as requested by the manager.

Cybersecurity Analyst – SOC

Director

• Ensure project planning, execution, and reporting in collaboration with internal and government stakeholders.
• Establish a shared understanding of the vision, governance, technology direction, scope, and schedule.
• Coordinate stakeholders, assess risks, and establish realistic timelines aligned with strategic objectives.
• Develop, maintain, and obtain approval for project plans, including objectives, deliverables, budgets, timelines, and governance.
• Facilitate project kickoff, status, risk management, and closeout meetings.
• Oversee work progress and adjust activities to meet the schedule.
• Produce status reports, project reviews, dashboards, and decision-making documents.
• Provide strategic recommendations and participate in decision-making for complex technical projects.
• Present progress updates, critical risks, and strategic issues to senior management.
• Monitor project performance in terms of scope, costs, schedule, quality, risks, and outstanding items.
• Validate that deliverables comply with functional and technical requirements.
• Identify, document, and manage risks, issues, and change requests.
• Propose and track corrective actions through to resolution.
• Submit final deliverables for approval and ensure their quality and compliance.
• Prepare communications for senior management, institutional partners, and the media.
• Collaborate with external service providers and internal partners to resolve issues and optimize solutions.
• Serve as the liaison between technical teams, vendors, the prime vendor, and management.
• Participate in committees and working groups to identify issues, validate requirements, and synchronize activities.
• Optimize design, integration, and deployment processes with the prime vendor.
• Track change requests, incidents, and technical issues.
• Support the transition to operations, including knowledge transfer, application support preparation, and negotiation of service agreements.
• Plan, organize, direct, and supervise the work of internal and external teams.
• Recommend the optimal use of the bank of hours and mobilize strategic internal expertise.

SIFA Project Director

Security Analyst

• Collaborate with stakeholders involved in cybersecurity monitoring and alerting
• Create and enhance monitoring use cases, alerts, and dashboards, and track the progress of mandates associated with these activities
• Establish and regularly review monitoring and alert management practices
• Measure the effectiveness of existing security controls
• Establish and maintain appropriate documentation
• Collaborate with cybersecurity technology analysts to provide subject-matter expertise

Cybersecurity Analyst – SIEM/SOAR

• Manage project planning, execution, and reporting with internal and government stakeholders.
• Ensure a shared understanding of the project vision, governance, technology direction, scope, and schedule.
• Coordinate stakeholders, assess risks, and establish realistic timelines aligned with strategic objectives.
• Develop, maintain, and obtain approval for project plans, including objectives, deliverables, budgets, schedule, and governance structure.
• Lead kickoff, status, risk management, and project closure meetings.
• Oversee work progress and make the adjustments required to meet the schedule.
• Prepare status reports, project reviews, dashboards, and decision-support materials for governance bodies.
• Provide strategic recommendations and actively participate in decision-making.
• Present progress, critical risks, and issues requiring strategic intervention to senior management.
• Monitor project performance in terms of scope, costs, schedule, quality, risks, and outstanding items.
• Validate that delivered results comply with functional and technological requirements.
• Identify and manage risks, issues, and change requests; recommend and track corrective actions.
• Submit final deliverables for approval and prepare communications for senior management, institutional partners, or the media.
• Collaborate with external service providers and internal partners to resolve issues, optimize solutions, and maintain an architecture aligned with business needs.
• Serve as the liaison between technical teams, vendors, the primary service provider, and management.
• Participate in committees and working groups to identify issues, validate requirements, and coordinate activities.
• Optimize design, integration, and deployment processes with the primary service provider.
• Monitor change requests, incidents, and technical issues.
• Support the transition to operations, including knowledge transfer, application support preparation, and the definition and negotiation of service-level agreements.
• Plan, organize, direct, and supervise the work of internal and external teams.
• Recommend the optimal use of the hours bank and mobilize strategic internal expertise.

Project Director, SIFA

• Monitor security events within the 24×7 Security Operations Center (SOC).
• Provide rapid analysis and response to detected threats.
• Monitor, analyze, and resolve identified security incidents in real time.
• Continuously develop and improve the SOC’s 24×7 capabilities.
• Handle cybersecurity alerts and incidents escalated by Tier 1 SOC analysts.
• Analyze and qualify alerts, including phishing, account compromise, malware, and lateral movement cases.
• Perform advanced analysis and recommend appropriate actions.
• Contribute to the initial incident response in collaboration with the relevant teams.
• Improve SOC processes, detection rules, and metrics.
• Provide guidance to management within the scope of the role.
• Correlate events from SIEM, XDR, EDR, identity, email, network, and cloud platforms.
• Enrich alerts using logs, indicators of compromise, and threat intelligence.
• Determine the verdict, severity, potential impact, and required actions.
• Recommend or initiate initial mitigation, containment, or escalation measures.
• Rigorously document investigations, findings, decisions, and actions taken.
• Perform first-level technical analysis of endpoint and network logs and artifacts.
• Support Tier 1 SOC analysts in handling complex cases.
• Improve detection rules, investigation queries, SOC runbooks, and playbooks.
• Use approved artificial intelligence and automation tools to support triage, enrichment, and documentation.

Cybersecurity Analyst, SOC

• Collaborate with stakeholders involved in cybersecurity monitoring and alerting
• Create and improve monitoring use cases, alerts, and dashboards, and track the progress of related initiatives
• Establish and regularly review monitoring and alert-management practices
• Measure the effectiveness of existing security controls
• Develop and maintain appropriate documentation
• Collaborate with cybersecurity technology analysts by providing subject-matter expertise

Cybersecurity Analyst – SOC

SIFA Project Director

Cybersecurity Analyst – SIEM/SOAR

Project Director, SIFA

Cybersecurity Analyst, SOC

Information Security Analyst – SIEM/SOAR