Security Operations Center Analyst

We are looking for a highly motivated SOC Analyst to join our Security Operations Center team. As a frontline defender, you will be responsible for monitoring and analyzing security events to identify potential threats and support incident response.

Key Responsibilities:

• Monitor security alerts and events from various sources (e.g., SIEM, EDR, firewalls, cloud platforms).
• Perform triage and investigation of potential security incidents.
• Escalate confirmed or suspicious incidents.
• Document findings and maintain accurate logs of investigations and outcomes.
• Support incident response efforts by gathering relevant logs and context.
• Monitor cloud and on-prem environments for unusual behavior or policy violations.
• Assist in tuning detection rules and updating incident response documentation.
• Participate in daily SOC briefings and shift handovers.
• Follow standard operating procedures (SOPs) and adhere to escalation protocols.

Requirements:

• 5+ years of experience in a SOC team.
• Basic understanding of networking, operating systems (Windows/Linux), and cybersecurity principles.
• Familiarity with tools such as EDR solutions and ticketing systems.
• Strong analytical thinking and attention to detail.
• Experience with SIEM Sentinel
• Familiar with analyzing incidents on Windows OS.
• Good written and verbal communication skills in English.
• Knowledge of MITRE ATT&CK framework and common attack techniques.
• Demonstrated practical use of AI/LLM tools (Claude, ChatGPT, Copilot, or equivalent) to accelerate engineering work: query and script generation, automation development, technical documentation, and triage support. Evaluates AI-generated output critically rather than accepting it at face value.

Nice to Have:

• Security certifications such as CompTIA Security+, Microsoft SC-200, or similar.