Security Operations Center (SOC) Analyst

Job Description

We are seeking a proactive and detail-oriented Security Operations Center (SOC) Analyst to join our cybersecurity team. In this role, you will be responsible for continuously monitoring enterprise networks, systems, cloud environments, and security tools to detect, investigate, and respond to cybersecurity threats. You will analyze security events, perform incident triage, and help protect critical business assets against cyberattacks.

As a SOC Analyst, you will collaborate with Incident Response teams, Threat Intelligence Analysts, Security Engineers, and IT Operations to investigate malicious activity, contain security incidents, and improve the organization’s overall security posture. The ideal candidate has experience with Security Information and Event Management (SIEM) platforms, endpoint detection and response (EDR) solutions, threat hunting, malware analysis, and incident response procedures.

This role provides an excellent opportunity to work in a fast-paced Security Operations Center, protecting enterprise infrastructure while gaining exposure to advanced cybersecurity technologies and real-world threat intelligence.

Key Responsibilities

• Monitor enterprise security alerts using SIEM platforms such as Microsoft Sentinel, Splunk, IBM QRadar, or Google Chronicle.
• Analyze security events and identify potential cyber threats, attacks, and suspicious activities.
• Investigate phishing, ransomware, malware, insider threats, and unauthorized access incidents.
• Perform initial incident triage, classification, containment, and escalation based on severity.
• Conduct threat hunting activities to proactively identify hidden threats across enterprise environments.
• Monitor Endpoint Detection and Response (EDR) tools to detect and respond to endpoint threats.
• Analyze firewall, VPN, IDS/IPS, proxy, authentication, and cloud security logs.
• Perform malware analysis using sandboxing and threat intelligence platforms.
• Develop and maintain SIEM correlation rules, detection use cases, and alert tuning.
• Collaborate with Incident Response teams during security investigations and remediation efforts.
• Maintain accurate incident documentation, investigation reports, and security metrics.
• Assist with vulnerability management and remediation validation.
• Support compliance initiatives related to NIST, ISO 27001, PCI DSS, HIPAA, SOC 2, and CIS Controls.
• Participate in security drills, tabletop exercises, and continuous improvement initiatives.
• Stay updated on emerging cyber threats, attack techniques, and threat intelligence feeds.

Required Qualifications

• Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, or a related field.
• 2+ years of experience in a Security Operations Center (SOC) or cybersecurity role.
• Strong understanding of networking concepts, operating systems, and cybersecurity fundamentals.
• Experience with incident detection, investigation, and response.
• Excellent analytical, problem-solving, and communication skills.
• Ability to work in a 24/7 SOC environment, including rotating shifts if required.

Required Technical Skills

• Microsoft Sentinel
• Splunk Enterprise Security
• IBM QRadar
• Google Chronicle
• CrowdStrike Falcon
• Microsoft Defender for Endpoint
• SentinelOne
• Palo Alto Cortex XDR
• Microsoft Defender XDR
• Wireshark
• Nessus
• Tenable
• Qualys
• TCP/IP
• DNS
• HTTP/HTTPS
• Windows Server
• Linux
• Active Directory
• Microsoft Entra ID (Azure AD)
• AWS Security Hub
• Microsoft Azure Security Center
• Python
• PowerShell
• Bash
• Jira
• ServiceNow

Preferred Qualifications

• Hands-on experience with MITRE ATT&CK framework.
• Knowledge of malware analysis and digital forensics.
• Experience with threat intelligence platforms such as MISP, Recorded Future, or VirusTotal.
• Familiarity with cloud security for AWS, Microsoft Azure, or Google Cloud Platform.
• Experience with SOAR platforms such as Microsoft Sentinel Automation, Cortex XSOAR, or Splunk SOAR.
• Understanding of Zero Trust Architecture and Identity & Access Management (IAM).
• Industry certifications such as:
  • CompTIA Security+
  • CompTIA CySA+
  • GIAC Certified Incident Handler (GCIH)
  • GIAC Certified Intrusion Analyst (GCIA)
  • EC-Council Certified SOC Analyst (CSA)
  • Certified Ethical Hacker (CEH)
  • Microsoft Certified: Cybersecurity Architect Expert (SC-100)
  • Microsoft Certified: Security Operations Analyst Associate (SC-200)

Benefits

• Competitive salary with annual performance bonuses
• Medical, dental, and vision insurance
• Paid vacation, holidays, and sick leave
• Remote and hybrid work opportunities
• Professional certification reimbursement
• Ongoing cybersecurity training and career development
• Access to advanced SOC technologies and threat intelligence platforms
• Collaborative, mission-driven security team
• Career advancement opportunities in Incident Response, Threat Hunting, Security Engineering, and Cloud Security