SOC Analyst

The SOC Analyst is responsible for continuously monitoring and analysing the organisation’s security posture to identify potential threats and indicators of compromise. The role involves investigating, tri‑aging, and responding to security alerts and incidents across the environment, using a range of security technologies, including extensive hands‑on use of Microsoft Defender for Endpoint for endpoint detection, investigation, and response activities. The SOC operates on a global scale and works closely with multiple teams and departments; as such, the SOC Analyst regularly engages with stakeholders across the business, adapting communication to suit varying levels of technical knowledge. In addition to security operations and alert triage, the SOC Analyst is responsible for the ongoing maintenance, tuning, and optimisation of security monitoring tools and detection rules to improve alert quality and reduce false positives. The role also includes creating, reviewing, and maintaining operational cybersecurity documentation, playbooks, and procedures to ensure consistent and effective security operations. Key Responsibilities Monitor security incidents and alerts for potential and active threats, intrusions, and/or compromises. Analyse and investigate security breaches and other cybersecurity incidents. Engage with a wide range of teams and departments within the company. Propose ideas for automating different SOC processes. Collaborate with the Cybersecurity Detection team to build and deploy new use cases. Collaborate with the Blue Team to perform tests and uncover security gaps. Collaborate with the Red Team to identify whether specific actions are detected. Help colleagues understand security risks and provide them with recommendations. Research security improvements and recommendations to management. Mentor interns and junior SOC staff. Qualifications Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, or a related field, or equivalent experience. Proven work experience as a SOC Analyst or similar role. Experience in information security or related field. Experience working in a global company. Desired Skills Knowledge of various security solutions (SIEM, EDR, firewalls and other security tools). Hands‑on experience of Microsoft Defender for Endpoint and other Defender tools. Knowledge of various security methodologies and processes. Knowledge of computer networks, operating systems, and basic programming. Experience with network, server, and application‑status monitoring. Strong analytical and problem‑solving skills. Excellent interpersonal and communication skills. Preferred Experience with ServiceNow Security Incident Response (SIR). Experience automating different SOC processes. Certifications Microsoft SC‑200 Microsoft AZ‑500 Microsoft SC‑100 CompTIA Security+ CompTIA CySA+ Blue Team Level 1 Blue Team Level 2 OSCP As an equal opportunity employer, we welcome applications from individuals with disabilities. #J-18808-Ljbffr Siemens Healthineers