Role Overview :

As a SOC Analyst, you will be at the forefront of our cybersecurity operations, responsible for monitoring, analyzing, and responding to security incidents across our clients' diverse environments. You will collaborate closely with other SOC analysts, threat hunters, incident responders, and engineering teams to ensure the confidentiality, integrity, and availability of critical systems and data. Your expertise will directly contribute to minimizing the impact of security breaches and protecting our clients' valuable assets.

Key Responsibilities :

- Monitor security alerts and events from various security tools, including SIEM platforms (Splunk, IBM QRadar, Microsoft Sentinel, ArcSight, LogRhythm) and endpoint detection and response (EDR) solutions (CrowdStrike Falcon, Microsoft Defender, SentinelOne, Palo Alto Cortex XDR), to identify potential security incidents.

- Analyze security incidents by correlating data from multiple sources, conducting preliminary investigations, and escalating complex issues to senior analysts or incident response teams, ensuring timely and effective resolution.

- Conduct vulnerability assessments to identify security weaknesses in systems and applications, providing actionable recommendations to clients for remediation and improved security posture.

- Perform basic malware analysis to understand the behavior and impact of malicious software, contributing to the development of effective detection and prevention strategies.

- Develop and maintain security documentation, including incident response procedures, playbooks, and knowledge base articles, to improve the efficiency and effectiveness of the SOC team.

- Participate in threat hunting activities to proactively identify and investigate potential security threats that may evade traditional security controls, enhancing the organization's overall security posture.

Required Skillset :

- Demonstrated ability to analyze security events and incidents using SIEM platforms such as Splunk, IBM QRadar, Microsoft Sentinel, ArcSight, or LogRhythm.

- Proven ability to investigate security incidents using EDR solutions like CrowdStrike Falcon, Microsoft Defender, SentinelOne, or Palo Alto Cortex XDR.

- Strong understanding of security concepts, including network security, endpoint security, and cloud security.

- Experience in conducting vulnerability assessments and providing remediation recommendations.

- Familiarity with malware analysis techniques and tools.

- Excellent analytical and problem-solving skills, with the ability to think critically and creatively.

- Strong communication and interpersonal skills, with the ability to effectively communicate technical information to both technical and non-technical audiences.

- Bachelor's degree in Computer Science, Information Security, or a related field.

- Ability to work effectively in a fast-paced, dynamic environment.