Typical Life of a SOC Analyst

hello. ur description already shows u roughly know the role of a SOC analyst. yes, that's a typical kind of work load one would expect from it. you r like the eyes to scan through the network perimeter of the system. of course the security solutions will sniff through and throw out alerts for you to investigate.

u thinking of becoming one?

I don't have any security certification or experience at the moment, but trying to find out how it is like to see if I can handle the stress and pace.

If there are multiple detections flooding and flashing on the screen non-stop while being bombarded by phone calls from concerned stakeholders asking for updates, and also simultaneously need to verify and research on the threats. I wonder how this is handled if the analyst is overwhelmed on a bad day.

Oh by the way, am I speaking to a SOC analyst with some experience to share?

hi, i think by now you would know that there is a big need for more cyber security personnel as there is a huge growing demand. The Singapore govt is and continue to invest as there is a big thrust to be a Smart Nation. With that in mind, cyber security will play a key role in Singapore's future. There are many courses that can help you to play a key role in this area. Typically, I have seen many people going for SANS which have their trainings in Singapore twice a year. I believe the next one should be in October but do some research before you commit yourself.

www.banffcyber.com/training/

 

As above. How is the life of a typical SOC analyst?

Understand they need to work 12 hour shifts (day/night). Do they have to stay back extra hours to do any administrative tasks or handover beyond 12 working hours?

Is it mostly staring at the screen for sign of detection/anomalies with occasional work, or fire-fighting every day from shift start to end? If there are detections requiring attention, how often are they? One event every few minutes? Or one event every 6 hours?

Is it a stressful high-paced job with constant stream of?˜incidents erupting daily or a routine job on most normal days like security guards?

Are there a lot of liaison work to be done to keep people updated, especially on the incident response team progress or to explain the situation to non-technical persons?

Can I hear from anyone who have experience as a SOC analyst/manager?