SOC Analyst

Job Purpose

SOC Level 2 Analysts perform in-depth investigation and incident response. They handle escalated alerts from Tier 1, confirm security incidents, and coordinate containment and remediation activities to minimize impact on the organization.

Key Responsibilities

• Perform detailed analysis of escalated alerts and incidents.
• Investigate malware, phishing, unauthorized access, and lateral movement.
• Analyze logs, network traffic, and endpoint behavior.
• Execute containment, eradication, and recovery actions.
• Coordinate incident response with IT, Cloud, and Network teams.
• Tune SIEM detection rules and reduce false positives.
• Develop and improve incident response playbooks.
• Mentor SOC Level 1 analysts.

Qualification & Experience

• Education: Bachelor's degree in IT, Computer Science, Cybersecurity, or related field.
• Experience: 2–5 years of SOC or cybersecurity experience.
• Certifications (if any): CEH, GCIH, GCED, Microsoft/AWS security certifications (preferred).

Required Skills & Competencies

• Technical Skills: Strong knowledge of networking, operating systems, and security controls; experience with malware analysis, phishing investigations, and endpoint tools; understanding of MITRE ATT&CK framework.
• Functional Skills: Root-cause analysis, risk assessment, SIEM rule tuning, playbook development, incident response coordination.
• Behavioral Competencies: Analytical mindset, collaboration with cross-functional teams, mentoring capability, ability to work under pressure.