SOC Analyst

About the Role
You will be on the front line of 24x7 Security Operations Center (SOC) operations protecting enterprise clients against active threats. This is not a passive monitoring role — you will be triaging, investigating, and responding to real incidents while working within a high-performing global delivery team where speed, accuracy, and judgment are critical.

Responsibilities

• Monitor and analyze security alerts from SIEM, SOAR, EDR, and other security tools to identify potential threats across client environments.
• Perform timely triage, validation, and investigation of alerts in line with SLA requirements and prioritization frameworks (P1–P4).
• Execute containment, response, and remediation actions using established SOC runbooks.
• Manage incidents through the full case lifecycle — accurate documentation, status updates, and closure in the case management system.
• Monitor SOC communication channels and ensure timely response to inquiries, escalations, and stakeholder coordination.
• Escalate high-severity and complex incidents in line with SLAs, including immediate notification for potential P1/P2 cases.
• Conduct effective shift handovers, ensuring active and critical cases are transferred with full context.
• Identify and report operational gaps, anomalies, or delays within the same shift to relevant leads.
• Contribute to continuous improvement by surfacing gaps in detection, logging, automation, and case handling processes.

What You'll Need

• Strong understanding of cybersecurity fundamentals — threat types, attack vectors, the CIA triad, and incident response principles.
• Working knowledge of operating systems (Windows, Linux/Unix) and networking concepts (TCP/IP, OSI model, DNS, HTTP/S).
• Hands-on experience or familiarity with SIEM/SOAR platforms, endpoint protection, firewalls, and security monitoring tools.
• Ability to analyze logs, network traffic, and endpoint telemetry to identify malicious activity.
• Disciplined and process-oriented — able to work effectively in a shift-based, SLA-driven environment.
• Clear communicator with strong documentation habits and the ability to coordinate across internal and external stakeholders.
• Bachelor's degree in Cybersecurity, Computer Science, Information Systems, or a related field.

Bonus Points

• Familiarity with the MITRE ATT&CK framework for threat identification and mapping.
• Exposure to cloud security concepts across Azure, AWS, or GCP.
• Relevant certifications such as CompTIA Security+, BTL1, or CEH.