Sr. SOC Analyst

Senior Security Operations Center (SOC) Analyst

The Senior Security Operations Center (SOC) Analyst is responsible for overseeing the detection, investigation, and mitigation of advanced cybersecurity threats. This role involves high-level incident response, threat hunting, and the continuous improvement of security monitoring tools and processes to protect the organization's digital assets.

Key Responsibilities

• Incident Response: Lead the investigation of complex security incidents; perform deep-dive forensics and coordinate remediation efforts to minimize impact.
• Threat Hunting: Proactively search for undetected malicious activity within the network using advanced analytical techniques and threat intelligence.
• Monitoring & Detection: Manage and fine-tune Security Information and Event Management (SIEM) tools, Intrusion Detection/Prevention Systems (IDS/IPS), and Endpoint Detection and Response (EDR) solutions.
• Threat Intelligence: Integrate and utilize threat intelligence feeds to stay ahead of emerging attack vectors and proactively update defensive postures.
• Mentorship: Provide technical guidance and mentorship to SOC analysts to enhance the overall capability of the team.
• Process Improvement: Develop, document, and refine Standard Operating Procedures (SOPs), incident response playbooks and SOC runbook.
• Vulnerability Management: Assist in identifying security gaps and coordinating with infrastructure teams to facilitate timely patching and mitigation.

Required Qualifications

Experience: Extensive experience in a SOC environment (typically 5+ years) with a focus on incident handling and digital forensics.

Technical Skills:

• Proficiency with SIEM platforms (e.g., Splunk).
• Strong understanding of network protocols (TCP/IP, DNS, etc.) and traffic analysis.
• Familiarity with malware analysis and reverse engineering techniques.

Analytical Skills: Exceptional problem-solving abilities and a high attention to detail.

Communication: Ability to communicate technical findings clearly to both technical teams and non-technical stakeholders.