SOC / Incident Response (IR) Analyst

Position: SOC / Incident Response (IR) Analyst

Experience:

Required Skills

• Strong knowledge of Security Incident Handling and Incident Response (IR) processes.
• Experience in investigating and responding to cybersecurity incidents.
• Good understanding of phishing, malware, account compromise, and other security threats.
• Hands-on experience with SOC operations, threat detection, and incident remediation.

Tools & Technologies

• GreyMatter (AI SOC)
• Microsoft Sentinel
• SentinelOne
• Microsoft Defender
• AWS Security Services
• PhishER
• ServiceNow (SNOW)

Key Responsibilities

• Monitor SOC and SPAM mailboxes.
• Monitor and manage ServiceNow (SNOW) queues.
• Respond to emergency calls and critical security notifications.
• Perform triage, validation, investigation, and remediation of security incidents.
• Investigate phishing emails, malware infections, account compromises, and other suspicious activities.
• Contain and respond to security incidents to minimize business impact.
• Collect and preserve evidence, perform root cause analysis, and document findings.
• Coordinate with IT, SOC, and other stakeholders during incident response activities.
• Prepare incident reports and recommend process improvements.
• Support threat hunting, security awareness, and continuous security improvement initiatives.