SOC Trainer

Role Overview:

We are looking for a SOC Trainer with hands-on L2 SOC experience to train and mentor L1 analysts, build a strong SOC team, and keep the team updated on cybersecurity and AI advancements.

Roles & Responsibilities:

• Leverage strong hands-on L2 SOC experience to train and mentor L1 SOC analysts.
• Conduct technical training on SOC operations, security monitoring, alert triage, threat detection, investigation and incident response.
• Train L1 analysts on SIEM, EDR/XDR, IDS/IPS, firewall monitoring, log analysis and security tools.
• Conduct practical training through real-world attack scenarios, incident simulations, tabletop exercises and SOC drills.
• Guide L1 analysts on proper incident investigation, escalation, documentation and response procedures.
• Identify technical skill gaps and develop structured upskilling and training programs for the SOC team.
• Mentor team members and help them progress from L1 toward higher-level SOC responsibilities.
• Build and maintain a strong, skilled, collaborative and high-performing SOC team through continuous coaching and knowledge sharing.
• Support team members in developing their technical, analytical and problem-solving capabilities.
• Conduct regular technical assessments, mock investigations and performance evaluations.
• Prepare and maintain training materials, SOPs, playbooks, labs and technical documentation.
• Keep the SOC team updated on emerging cyber threats, attack techniques, vulnerabilities and industry best practices.
• Stay updated on AI advancements, AI-powered security solutions, automation and their applications in SOC operations.
• Identify opportunities to leverage AI and automation to improve security monitoring, investigation, threat detection and SOC efficiency.
• Demonstrate excellent communication and presentation skills with the ability to clearly explain complex cybersecurity concepts to team members.
• Work closely with SOC leadership to continuously improve team capabilities, processes, detection use cases and incident response readiness.
• Encourage a culture of continuous learning, collaboration, knowledge sharing and professional development within the SOC team.

Key Requirements:

• Hands-on L2 SOC experience with the ability to effectively train and mentor L1 SOC analysts.
• Strong practical knowledge of SOC operations, SIEM, EDR/XDR, incident response, threat detection and security monitoring.
• Good understanding of MITRE ATT&CK, threat intelligence, IOC analysis, threat hunting and log analysis.
• Excellent communication, presentation and interpersonal skills.
• Strong leadership, mentoring, coaching and team-building capabilities.
• Ability to build and develop a strong, capable and high-performing SOC team.
• Good understanding of AI advancements and their potential applications in cybersecurity and SOC operations.
• Ability to create and deliver hands-on, scenario-based technical training.