SOC Analyst N2

Responsibilities

• Perform advanced investigations on incidents escalated by level 1
• Analyze logs, PCAP, SIEM data, NIDS, EDR, firewalls, and OT tools
• Correlate multi-source data to identify attack patterns and root causes
• Lead containment, eradication, and recovery actions with technical teams
• Participate in threat hunting and improve detection rules, correlations, and signatures
• Update incident response playbooks
• Support L1 analysts in managing alerts and incidents
• Produce investigation reports, feedback, and operational documentation
• Update dashboards, indicators, and activity reports

Requirements

• 2 to 5 years of experience in SOC incident resolution
• Experience in SOC, investigation, and incident response
• Proficiency with SIEM tools such as Sentinel or Splunk
• Practice in log analysis, PCAP, and network/host forensics
• Knowledge of NIDS/IPS, EDR, firewalls, and vulnerability management
• Understanding of cloud and hybrid environments (Azure, AWS, GCP)
• Ability to write SOPs, runbooks, playbooks, and reports
• Mandatory English proficiency

Preferred Qualifications

• Knowledge of OT/ICS environments, industrial architectures, and protocols (Modbus, DNP3, OPC, Profinet)
• Experience with OT platforms like Claroty or Nozomi
• Certifications such as IEC 62443, GICSP, CISSP, or CompTIA Security+
• Skills in Python, API, Power BI, or Tableau

About the Company

HELPLINE specializes in user support outsourcing and the implementation of an AI-augmented employee experience. Part of the Everience group, HELPLINE provides IT asset management, GRC, and technical assistance to over 200 clients worldwide.