Security Operations Center Analyst

Job description

Security Analyst – SOC Analyst Role: We are looking for a SOC Analyst to monitor, investigate, and respond to security incidents across our cloud infrastructure, endpoints, and network. The role involves threat detection, incident response, SIEM monitoring, and continuous improvement of security operations. Key Responsibilities: • Monitor and investigate security alerts from SIEM, EDR/XDR, firewall, cloud, and email security tools. • Analyze logs, triage incidents, and ensure timely response within SLA. • Perform threat hunting and fine-tune SIEM detection rules. • Monitor AWS/GCP security services and endpoint security solutions. • Manage incidents through Jira and prepare security reports. • Collaborate with IT and Engineering teams during investigations. Required Skills: • 2–4 years of SOC experience. • Hands-on experience with SIEM (Wazuh, Splunk, QRadar, or Microsoft Sentinel). • Experience with EDR/XDR solutions (Trend Micro, Defender, CrowdStrike, etc.). • Knowledge of AWS/GCP security services. • Good understanding of networking, Linux, incident response, and log analysis. • Familiarity with the MITRE ATT&CK framework. Preferred • Security certifications (e.g., CompTIA Security+, CompTIA CySA+, Google Professional Cloud Security Engineer, AWS Certified Security – Specialty). • Basic scripting (Python/Bash) and SIEM rule creation experience.