SOC Architect

3 or more years of experience in cybersecurity operations center (CSOC) monitoring and threat analysis. Proficiency in SIEM platforms including Microsoft Sentinel, Splunk, and QRadar for alert triage. Experience with Endpoint Detection and Response (EDR) platforms like CrowdStrike and Microsoft Defender. Experience in correlating IOCs and telemetry from IDS/IPS, firewalls, and threat intelligence feeds. Experience with query and scripting languages including KQL, SPL, PowerShell, and Python. Experience in MITRE ATT&CK mapping, NIST incident response frameworks, and cloud security monitoring. Excellent verbal and written communication skills.

Monitor, triage, and analyze real-time security alerts generated across enterprise SIEM and EDR platforms. Investigate suspicious network traffic, anomalous user behaviors, phishing attempts, and malware indicators. Correlate cross-platform telemetry from firewalls, identity providers, and network intrusion detection systems. Execute initial incident containment procedures and escalate confirmed security events to Tier 2 responders. Document technical findings, root-cause assessments, and remediation steps within incident ticketing systems. Author query filters in KQL and SPL to tune false positives and optimize threat detection rules. Review vulnerability assessment scans to prioritize patching efforts against active threat landscape vectors.

For applications and inquiries, contact:View email address on us.fitly.work