SOC Security Analyst

• Monitor security alerts and events from SIEM, IDS/IPS, firewalls, and other security tools.
• Analyze logs, network traffic, and endpoint data to identify threats and anomalies.

• Lead and participate in the end-to-end incident response process: detection, containment, eradication, recovery, and post-incident analysis.
• Document and escalate incidents as per defined procedures.
  

• Proactively hunt for threats using advanced analytics and threat intelligence.
• Develop and refine detection techniques to identify new attack vectors.

• Contribute to the development and improvement of SOC processes, playbooks, and standard operating procedures.
• Maintain up-to-date knowledge of the cyber threat landscape and emerging technologies.

• Work closely with IT, compliance, and other security teams to ensure coordinated response to incidents.
• Prepare detailed incident reports, dashboards, and metrics for management.

• Bachelor s degree in Computer Science, Information Security, or related field (or equivalent experience).
• 3-5 years of hands-on experience in a SOC environment or similar security operations role.
• Strong technical knowledge of:

• Experience with incident response methodologies and frameworks (e.g., NIST, SANS).
• Familiarity with MITRE ATT&CK, cyber kill chain, and threat intelligence platforms.
• Scripting skills (Python, PowerShell, Bash) for automation and data analysis are a plus.
• Relevant certifications preferred (e.g., CEH, GCIA, GCIH, Security+, CySA+).

Personal Attributes

• Strong analytical and problem-solving skills.
• Excellent communication skills (verbal and written).
• Ability to work under pressure and handle multiple incidents simultaneously.
• Team player with a passion for continuous learning and improvement.