SOC Analyst L2

Key Responsibilities*

* Investigate and respond to security incidents across endpoint, network, identity, and cloud environments.

* Perform threat analysis using Microsoft Sentinel, Microsoft Defender XDR, SIEM, and EDR.

* Conduct KQL log analysis, threat hunting, and root cause analysis.

* Validate alerts, determine severity, and coordinate incident remediation with CSIRT.

* Optimize SIEM use cases, detection rules, automation, and playbooks.

* Document investigations, maintain SOC procedures, and support security hardening.

* Participate in on-call support rotations.

Requirements

✅ 3+ years of experience in SOC/CSIRT/CERT/Incident Response.

✅ Hands-on experience with Microsoft Sentinel, Microsoft Defender XDR, SIEM, EDR, and KQL.

✅ Strong knowledge of Firewalls, IDS/IPS, TCP/IP, DNS, Active Directory, Windows/Linux Security, Microsoft 365 Security, and the MITRE ATT&CK Framework.

✅ Strong analytical, troubleshooting, incident investigation, communication, and documentation skills.