Technical Lead - SOC L3

Position Overview

We are seeking an experienced Senior Security Analyst to join our Security Operations Center (SOC). The ideal candidate will be responsible for proactive monitoring, detection, analysis, and response to cybersecurity incidents. This role requires strong analytical skills, advanced knowledge of security technologies, and the ability to act as an escalation point for junior analysts while contributing to the continuous improvement of SOC operations.

Key Responsibilities

Monitoring & Detection, Incident Response, Threat Hunting, SOC Process & Tooling Enhancement, Compliance & Reporting, 

Technical Skills

• Strong knowledge of SIEM platforms (Splunk, QRadar, Sentinel, ArcSight, etc.).
• Hands-on experience with Endpoint Detection & Response (EDR) tools (CrowdStrike, Carbon Black, SentinelOne, etc.).
• Proficiency in network traffic analysis, packet inspection, and log correlation.
• Familiarity with malware analysis, sandboxing, and reverse engineering concepts.
• Strong grasp of cloud security monitoring (AWS, Azure, GCP).
• Knowledge of MITRE ATT&CK framework and application in SOC workflows.
• Scripting skills in Python, PowerShell, or Bash for automation and investigation support.

Preferred Certifications

• Mandatory (at least one):
• GIAC Certified Incident Handler (GCIH)
• Certified Ethical Hacker (CEH)
• CompTIA Security+ (for baseline, if complemented with advanced certs)
• Preferred:
• GIAC Certified Intrusion Analyst (GCIA)
• GIAC Certified Forensic Analyst (GCFA)
• Offensive Security Certified Professional (OSCP)
• Microsoft Certified: Security Operations Analyst Associate