SoC Analyst / Senior Analyst

Job Title:

Experience:

Location:

Department:

Job Summary:

We are seeking an experienced and detail-oriented SOC Analyst (5 - 8 years) to join our cybersecurity team. The ideal candidate will be responsible for monitoring, detecting, investigating, and responding to cyber threats across the organization. The SOC Analyst will play a critical role in defending systems, applications, and data from security breaches and supporting incident response efforts, threat hunting, and continuous improvement of SOC processes.

Key Responsibilities:

Security Monitoring & Incident Response:

• Continuously monitor SIEM dashboards, threat intelligence feeds, and security alerts.
• Investigate and respond to security incidents, phishing attacks, malware infections, and anomalous activities.
• Triage alerts based on severity, business impact, and threat intelligence context.
• Perform root cause analysis and prepare incident reports with actionable recommendations.
• Escalate critical incidents to Tier 3/IR teams and collaborate during major security events.

Threat Detection & Hunting:

• Conduct proactive threat hunting based on IOCs, TTPs, and threat intelligence reports.
• Analyse logs from endpoints, firewalls, IDS/IPS, cloud workloads, and third-party security solutions.
• Develop and fine-tune detection rules and correlation logic in SIEM (e.g., Splunk, Sumo Logic, Sentinel).

Tool & Infrastructure Management:

• Work with EDR, NDR, DLP, SIEM, SOAR, and vulnerability management platforms.
• Support integration of new log sources and ensure completeness of logging for critical systems.
• Maintain threat detection playbooks and contribute to process automation via SOAR tools.

Compliance & Reporting:

• Ensure security operations align with frameworks like NIST, ISO 27001, SOC 2, or HIPAA.
• Support security audit requirements by providing incident logs and response documentation.
• Generate periodic reports on incident trends, SOC performance, and threat landscape.

Required Skills & Experience:

• 58 years of experience in a SOC environment or cybersecurity operations role.
• Strong knowledge of attack vectors, MITRE ATT&CK framework, and incident response lifecycle.
• Hands-on experience with SIEM (e.g., Splunk, Microsoft Sentinel, QRadar, LogRhythm).
• Familiarity with endpoint protection (CrowdStrike, SentinelOne, Defender ATP, etc.).
• Knowledge of Windows/Linux log analysis, firewall rules, and cloud security controls (Azure/AWS).
• Strong analytical thinking, attention to detail, and ability to work under pressure.

Preferred Qualifications:

• Bachelors degree in Cybersecurity, Computer Science, or related field.
• Certifications such as

  CEH, GCIA, GCIH, CySA+, AZ-500, or Security+

  are highly desirable.
• Experience working in a 24x7 SOC or with MSSP environments is a plus.
• Exposure to compliance-driven industries (finance, healthcare, SaaS) preferred.

Soft Skills:

• Strong communication and documentation skills.
• Ability to collaborate across IT, DevOps, and security teams.
• Risk-aware mindset with a proactive approach to security operations.

Work Mode:

Reporting To: