Soc Analyst

Role & responsibilities:

As a Senior security analyst , you will:

• As Tier 2 Senior SOC Analyst will be responsible for providing advanced technical expertise and leadership within our client Security Operations Center (SOC).
• This individual will play a pivotal role in driving the investigation and resolution of complex security incidents, as well as developing and implementing proactive security measures to enhance our client's defences.
• You will possess a strong background in cybersecurity, exceptional analytical skills, and a proven track record of mitigating sophisticated threats.
• Lead the investigation and response to high-priority security incidents, including advanced malware attacks, data breaches, and external threats.
• Conduct in-depth analysis of security events and alerts from various sources, including SIEM (Security Information and Event Management) systems, endpoint detection and response (EDR) solutions, and network traffic logs, to identify and mitigate security threats.
• Develop and maintain incident response playbooks, runbooks, and standard operating procedures (SOPs) to ensure consistent and effective response to security incidents.
• Provide technical guidance and mentorship to junior SOC analysts, assisting with complex investigations and escalations as needed.
• Collaborate with cross-functional teams, including threat intelligence, network engineering, and system administration, to develop and implement proactive security controls and measures.
• Conduct root cause analysis of security incidents and provide recommendations for remediation and future prevention.
• Stay abreast of the latest cybersecurity threats, vulnerabilities, and industry best practices, sharing knowledge and insights with the broader team.
• Assist in the evaluation and deployment of new security technologies and tools to enhance the capabilities of the SOC.
• Participate in tabletop exercises, red team/blue team simulations, and incident response drills to validate the effectiveness of security controls and procedures.

Mandatory Skills/Experience:

• Bachelors degree in computer science, Information Security.
• Minimum of 3 years of experience in a SOC Analyst role, with a focus on incident response and threat hunting.
• Strong understanding of cybersecurity concepts, including network protocols, malware analysis, and intrusion detection.
• Email Security knowledge, Investigation of Phishing/SPAM emails
• Experience with leading SIEM platforms such as Splunk, RSA Netwitness, including the development of custom correlation rules and dashboards.
• Understanding of XSOAR and flow of the playbooks.
• Relevant industry certifications preferred.
• Excellent communication and interpersonal skills, with the ability to effectively communicate technical information to both technical and non-technical stakeholders.
• Strong problem-solving skills and ability to work effectively under pressure in a fast-paced environment.
• Demonstrated leadership experience and ability to mentor and coach junior team members.

Desirable Skills & Knowledge:

• Exposure to various cyber-attack vectors, understanding of MITRE-ATT&CK framework
• Strong experience in SOC tools, handling escalated incidents within SLA