Security Operations Center Analyst

Job Summary:

We are seeking a highly motivated and detail-oriented SOC Engineer to join our Security Operations Center team. The SOC Engineer will play a critical role in monitoring,

detecting, analyzing, and responding to security incidents across our IT and OT

environments. This position requires a strong foundation in network security, threat

intelligence, incident response, and security technologies. The SOC Engineer will work

closely with IT and OT teams to ensure the confidentiality, integrity, and availability of

our systems and data.

Key Responsibilities:

Monitoring and Detection:

• Continuously monitor security events and alerts using SIEM and other security tools.
• Identify and analyze potential security threats, anomalies, and policy violations.
• Ensure real-time visibility into the security posture of the organization

Incident Response:

• Investigate and analyze security incidents, including malware, intrusions, and Policy violations.
• Perform incident response activities such as containment, eradication, and recovery.
• Collaborate with IT and OT teams to ensure timely resolution of security issues.

Documentation and Reporting:

• Document incidents, maintain logs, and prepare detailed incident reports.
• Present findings and recommendations to management and stakeholders.
• Support compliance initiatives and audits as required.

Process Improvement:

• Stay updated on emerging threats, vulnerabilities, and security best practices.
• Participate in security drills and contribute to the continuous improvement of SOC processes.
• Assist in the implementation and tuning of security controls, including firewalls, IDS/IPS, and endpoint protection.

Compliance and Collaboration:

• Support compliance initiatives and audits as required.
• Collaborate with IT and OT teams to ensure seamless integration of security measures.

Required Qualifications:

• Bachelors degree in computer science, Information Security, or a related field.
• 2+ years of experience in security operations, incident response, or a related field.
• Strong understanding of networking, operating systems, and security protocols.
• Experience with SIEM tools (e.g., Splunk, QRadar, ArcSight).
• Familiarity with incident response frameworks (e.g., NIST, SANS).
• Knowledge of threat intelligence, malware analysis, and forensic investigation.
• Excellent analytical, problem-solving, and communication skills.
• Ability to work in a fast-paced, high-pressure environment.

Preferred Qualifications:

• Certifications such as CompTIA Security+, CEH, CISSP, or GIAC.
• Experience with IT/OT integration and industrial control systems.
• Knowledge of compliance standards (e.g., ISO 27001, NIST, IEC 62443)

Key Competencies:

• Attention to detail
• Teamwork and collaboration
• Adaptability and continuous learning
• Proactive approach to problem-solving
• Time management and prioritization
• Critical thinking and analytical mindset
• Communication and interpersonal skills