SOC Senior Analyst

Responsibilities

• Monitor, analyze, and interpret security/system logs for events and potential incidents
• Utilize SIEM, IDS/IPS, Firewalls, and EDR tools for detection and analysis
• Conduct basic red team exercises to test preventive and monitoring controls
• Support malware analysis, host/network log analysis, and triage for incident response
• Maintain and improve security technologies by creating use cases and customizing configurations
• Monitor threat/vulnerability landscapes and security advisories
• Tune SIEM content, parsing, and maintenance
• Monitor Cloud infrastructure for security-related events
• Develop and coach L1 analysts and author Standard Operating Procedures (SOPs)
• Manage the full ticket lifecycle from detection to remediation
• Perform threat-intel research and participate in security forums

Requirements

• Bachelor’s degree in Engineering or related technology discipline
• 4+ years of SOC related work experience
• Advanced knowledge of TCP/IP protocols and event log analysis
• Strong understanding of Windows, Linux, and networking concepts
• Experience analyzing log and packet data using Wireshark or tcpdump
• Proficiency with security solutions including SIEM, EDR, Firewalls, and VPN
• Functional understanding of Cloud environments
• Experience working in a TAT based IT security incident resolution practice

Preferred Qualifications

• Certifications such as CISSP, CEH, CISM, GCIH, or GCIA
• Experience with Splunk, IBM QRadar, or SecureOnix
• Experience with Crowdstrike, Sentinel, VMware, or Microsoft Defender ATP
• Experience with Case Management tools like Swimlane or Phantom
• Scripting and programming skills in Python or PERL
• Knowledge of malware analysis and reverse engineering