Consultant - CyberSecurity

SOC AnalystBerlin, CT( Onsite)This is designed for a highpriority P1 role in a Security Operations Centre SOC focusing on realtime threat detection incident response and proactive defence.As a P1 SOC Monitoring Analyst you will be responsible for realtime monitoring triage and escalation of security incidents using a suite of advanced cybersecurity tools.You will act as the first line of defence against cyber threats ensuring rapid detection and response to potential security breaches across endpoints networks cloud environments and email systems.Key ResponsibilitiesRealTime Monitoring Triage.oMonitor security s and logs from CrowdStrike EDR IDP NextGenXOR Logscale Microsoft Defender SIEM and ORCA.Analyse and triage s based on severity impact and relevance to business operations.Threat Detection Response.Investigate suspicious activities using Threat Intel Advisories DHS CRISPEISAC feeds and internal threat intelligence.Escalate confirmed incidents to L2 L3 teams with detailed analysis and recommendations.Email Endpoint Security.Monitor and respond to emailbased threats using Proofpoint.Ensure endpoint protection and behavioural analysis through CrowdStrike and Microsoft Defender.Cloud Network Security.Monitor cloud workloads and configurations using ORCA.Analyse traffic and application behaviour via F5 WAF and Zscaler for anomalies and policy violations.Azure Entra ID Management.Manage Microsoft Entra ID Azure AD including user and group management multifactor authentication MFA Conditional Access policies Privileged Identity Management PIM and Identity Protection.Integrate Entra ID with thirdparty and onpremises applications for seamless and secure single signon SSO and federation.Enforce the principle of least privilege through a robust RoleBased Access Control RBAC model at the tenant subscription and resource levels.Deploy configure and manage security tools including Microsoft Defender for Cloud Microsoft Sentinel and Azure Policy to monitor security posture and detect threats across the tenant.Conduct security assessments and audits to identify potential threats vulnerabilities and gaps in existing and proposed architectures.Create and manage custom Entra ID roles and integrate with identity governance policies and access reviews.Documentation Reporting.Maintain accurate incident logs timelines and evidence for each.Generate daily and weekly reports on SOC activities threat trends and tool performance.Required Skills Experience2 years of experience in SOC or cybersecurity operations.Handson experience withCrowdStrike EDR IDP Logscale.SIEM platforms Splunk QRadar Logscale etc.Microsoft Defender.Proofpoint.F5 WAF Zscaler.ORCA Cloud Monitoring Agent.Threat Intelligence platforms CRISPEISAC commercial feeds.Microsoft Azure Entra ID.Strong understanding of MITRE ATTCK framework incident response lifecycle and threat hunting.Ability to work under pressure and manage multiple highpriority s simultaneously.Excellent communication and documentation skills.Preferred Certifications.CompTIA Security.Certified SOC Analyst CSA.CrowdStrike Certified Falcon Administrator.Microsoft SC200 Security Operations Analyst Associate.