Soc Analyst 2

Job Title:

Level: Senior Associate

Experience Required: 5 to 8 years

Position Summary:

Key Responsibilities:

• Lead the investigation, analysis, and response of cybersecurity incidents utilizing SentinelOne EDR, SIEM platforms, and other security tools.
• Develop, tune, and maintain detection rules, watchlists, and dashboards aligned with current threat intelligence and MITRE ATT&CK frameworks.
• Act as an escalation point for Level 1 analysts, providing guidance and support during triage and complex incident handling.
• Monitor and manage alert queues, ensuring SLA adherence and effective incident prioritization.
• Mentor and coach junior analysts, fostering a collaborative and inquisitive team culture.
• Collaborate with cross-functional teams to continuously improve SOC processes, including automation using Python or PowerShell scripting.
• Prepare and present reports, presentations, and documentation to enable informed decision-making for clients and leadership.
• Stay current with emerging cybersecurity threats, vulnerabilities, technologies, and best practices.
• Participate actively in shift handovers, daily huddles, and global team coordination to provide seamless 24x7 coverage.

Basic Qualifications:

• Bachelors degree in Computer Science, Information Security, or related field.
• Minimum of 5 years of relevant experience in cybersecurity operations or threat detection.
• Hands-on experience with SentinelOne EDR platform and SIEM tools (e.g., Splunk, MS Sentinel).
• Strong understanding of networking fundamentals (OSI Model, TCP/IP, DNS), incident response frameworks, and cyber attack lifecycle.
• Familiarity with scripting languages such as Python or PowerShell.
• Relevant certifications preferred: GSEC, GCDA, SEC+, GCIH, GIAC, CCNA-Security, CEH, CISSP, CTIA.
• Excellent communication skills with the ability to convey technical information clearly and concisely.
• Demonstrated leadership capabilities and experience working within global, shift-based SOC environments.

Preferred Skills:

• Expertise in threat hunting, malware analysis, SOAR platforms (e.g., Palo Alto XSOAR), and security best practices.
• Experience with additional security tools including MS Defender, CrowdStrike, Cortex XDR, Proofpoint, and DLP solutions.
• Ability to foster a collaborative and high-performance team culture.

  Role & responsibilities

Preferred candidate profile