Tier 2 SOC Analyst

Job description

Required Qualifications - 3+ years of experience in SOC, incident response, or cybersecurity operations role - Proficiency with SIEM platforms (e.g., Splunk, Microsoft Sentinel, QRadar) - Hands-on experience with EDR tools (e.g., CrowdStrike Falcon, Microsoft Defender, Carbon Black) - Strong understanding of the MITRE ATT&CK framework and its application to threat detection - Solid knowledge of networking fundamentals (TCP/IP, DNS, HTTP/S, firewalls, proxies) - Experience analyzing malware behavior, phishing campaigns, and intrusion attempts - Familiarity with log analysis across Windows, Linux, and cloud environments - Ability to write and run queries in SPL, KQL, or equivalent query languages Preferred Qualifications - Relevant certifications: Security+, CySA+, CEH, GCIH, GCIA, or equivalent - Experience with cloud security monitoring (AWS, Azure, or GCP) - Scripting skills in Python, PowerShell, or Bash for automation and analysis - Familiarity with SOAR platforms and playbook automation - Prior experience with threat intelligence platforms (e.g., MISP, ThreatConnect)