לארגון מוביל דרוש/ה SOC Analyst Tier 2

SOC Analyst Tier 2 – Leading Organization We are looking for an experienced SOC Analyst Tier 2 to join a cybersecurity team in a challenging role involving in-depth security investigations, incident response, proactive threat hunting, and continuous improvement of the organization's detection and monitoring capabilities. Key Responsibilities Investigate security incidents and handle escalations from Tier 1 analysts. Conduct in-depth investigations of complex security alerts, security breaches, and suspicious activities, including malware, phishing, and unauthorized access. Perform proactive threat hunting to identify advanced threats, behavioral anomalies, and low-signature malicious activity using advanced analytical techniques and the MITRE ATT&CK framework.

Perform basic endpoint forensics and network traffic analysis to identify attack vectors and assess the scope of compromise. Analyze, develop, and fine-tune SIEM/XDR detection rules to reduce false positives and improve monitoring effectiveness. Identify gaps in SOC workflows and initiate projects to improve processes and security capabilities. Mentor and provide professional guidance to Tier 1 analysts.

Collaborate with infrastructure and development teams to reduce the organization's attack surface and strengthen its security posture. Required Qualifications 2–3 years of experience as a SOC Analyst, preferably with prior Tier 1 experience or a background in systems administration or networking. Proven experience investigating, analyzing, and responding to cybersecurity incidents. Hands-on experience investigating security incidents in multi-cloud environments, particularly AWS and Azure.

Practical experience working with security technologies, including Firewalls, IPS, WAF, EDR/XDR, and SIEM systems. In-depth understanding of network protocols, including TCP/IP, DNS, and HTTP/S, along with strong network traffic analysis skills. Basic hands-on experience with static and dynamic analysis of suspicious files. Strong technical writing skills in both Hebrew and English.

Advantages Experience writing Python or PowerShell scripts to automate investigation processes. Hands-on experience with Microsoft Sentinel, Splunk, or Palo Alto Cortex. Ability to write complex queries using KQL and SPL. In-depth familiarity with the MITRE ATT&CK framework and threat hunting methodologies.

Are you analytical, technically skilled, and passionate about investigating complex cybersecurity threats? We'd love to hear from you!