SECURITY OPERATIONS CENTER (SOC) ANALYST

About the Role
The Security Operations Center (SOC) Analyst plays a pivotal role in safeguarding the organization by continuously monitoring and analyzing security alerts and events. This position involves the investigation of suspicious activities and potential cyber threats, ensuring that security incidents are appropriately classified, prioritized, and escalated according to established protocols. The SOC Analyst works as part of a dynamic team to respond to security incidents and support recovery activities, contributing to the overall security posture of the organization.

Responsibilities

• Continuously monitor security alerts and events through SIEM and other monitoring platforms.
• Analyze and investigate suspicious activities, security incidents, and potential cyber threats.
• Classify, prioritize, and escalate security incidents according to established procedures.
• Perform initial containment and support incident-response and recovery activities.
• Analyze logs from firewalls, endpoints, servers, applications, and network devices.
• Conduct threat hunting and identify indicators of compromise.
• Maintain incident records, investigation findings, and shift-handover reports.
• Fine-tune SIEM rules, alerts, dashboards, and use cases to reduce false positives.
• Coordinate with infrastructure, network, application, and cybersecurity teams during investigations.
• Stay updated on emerging threats, vulnerabilities, and attack techniques.

Requirements

• Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, or a related discipline.
• Minimum 5 years of relevant experience in SOC operations or cybersecurity monitoring.
• Hands-on experience with SIEM, EDR, IDS/IPS, SOAR, and threat-intelligence platforms.
• Strong knowledge of incident detection, investigation, response, and escalation procedures.
• Good understanding of TCP/IP, DNS, HTTP/HTTPS, VPN, firewalls, and common network protocols.
• Familiarity with malware analysis, phishing investigations, threat hunting, and log analysis.
• Willingness to work rotational shifts in a 24/7 SOC environment, if required.
• Certifications such as CompTIA Security+, CySA+, CEH, GCIH, or equivalent are preferred.
• Strong analytical, documentation, and communication skills.