SOC Analyst

Responsibilities

• Act as an escalation point for high and critical severity security incidents and conduct thorough investigations
• Verify and authenticate events, alerts, and incidents reported by L1 analysts
• Analyze attack patterns, Tools, Techniques and Procedures (TTPs) to identify methods of attacks
• Define, plan, implement, maintain, and upgrade security measures, policies, and controls
• Develop and implement novel threat detection content, rules, and use cases for SIEM platforms
• Conduct analysis to gather evidence, validate root cause, and analyze the extent of compromise
• Collaborate with cross-functional teams to ensure end-to-end management of security incident lifecycle
• Identify and leverage emerging threat intelligence (IOCs, updated rules, etc.)
• Ensure process compliance through regular reviews and updates of SOPs, playbooks, and work instructions
• Perform advanced threat correlation between multiple security event sources
• Train L1/L2 analysts via planned knowledge transfer and internal training sessions

Requirements

• Minimum 8 years of experience in a large-scale IT environment focusing on Cyber/Information Security
• Strong knowledge of Network security including Firewalls, Proxies, IDS/IPS, and Vulnerability Scanners
• Seasoned in Digital forensics, malware assessment, and Threat Hunting
• 5+ years of hands-on experience with analytical platforms such as Splunk, Qradar, Hunters, SumoLogic, or Sentinel
• Deep understanding of the MITRE ATT&CK Framework
• Experience conducting vulnerability testing, risk analyses, and security audits
• Ability to participate in on-call rotations and work in shift schedules
• Strong analytical, problem-solving, and report-writing skills
• Excellent communication and interpersonal skills for stakeholder management