UNICCON Group
|SOC Analyst (L1)
Abuja, Nigeria
Summary
Monitored security alerts, analyzed network traffic, and performed log analysis to identify potential security incidents. Evaluated security controls and misconfigurations to support threat containment and remediation.
Highlights
Triaged daily security alerts in Splunk SIEM using SPL queries, Sysmon, and Windows Event Logs (4625, 4672).
Investigated phishing emails by analyzing headers (SPF/DKIM/DMARC), extracting IOCs, and validating via VirusTotal and URLScan.
Mapped findings to MITRE ATT&CK framework (T1110, T1078, T1566) and documented incidents in Jira/ServiceNow to escalate true positives within SLA.