SOC Analyst

Responsibilities

• Continuously monitor security alerts and events from SIEM tools and security platforms
• Identify and categorize suspicious activities, malware alerts, phishing attempts, and intrusion attempts
• Assist in triaging and prioritizing security alerts based on severity levels
• Perform initial investigation on security events to determine potential threats or false positives
• Gather and analyze logs from firewalls, endpoint security, network devices, and applications
• Document incident findings and escalate critical alerts to senior analysts or Incident Response team
• Assist in containment, mitigation, and recovery steps under guidance
• Participate in incident handling processes and follow defined playbooks/runbooks
• Support forensic evidence collection when required
• Maintain detailed incident tickets with investigation notes and actions taken
• Prepare periodic reports on alerts, incident trends, and security posture improvements
• Stay updated with emerging cyber threats, vulnerabilities, and security trends
• Contribute to refining SOC processes, SOPs, and threat detection mechanisms

Requirements

• Experience monitoring security alerts and events from SIEM tools
• Ability to analyze logs from firewalls, endpoint security, and network devices
• Understanding of incident handling processes and playbooks
• Knowledge of emerging cyber threats and vulnerabilities