01Key Responsibilities
SOC Analyst L1
Monitor security events and alerts using SIEM tools.
Perform initial triage and analysis of security incidents.
Escalate critical incidents to L2/L3 teams.
Create and maintain incident reports and documentation.
Monitor network, endpoint, and cloud security alerts.
SOC Analyst L2
Investigate and analyze security incidents in depth.
Conduct threat hunting and forensic analysis.
Review and tune SIEM use cases and alert rules.
Coordinate incident response activities.
Provide guidance and support to L1 analysts.
SOC Analyst L3
Lead complex incident investigations and response efforts.
Perform advanced threat hunting and malware analysis.
Develop detection use cases and security automation.
Conduct root cause analysis and recommend remediation actions.
Mentor L1 and L2 analysts and contribute to SOC strategy improvements.
Required Skills:
Experience with SIEM platforms such as Splunk, QRadar, Sentinel, ArcSight, or LogRhythm.
Knowledge of incident response and threat management.
Understanding of network security, firewalls, IDS/IPS, EDR, and security monitoring tools.
Familiarity with cybersecurity frameworks and best practices.
Strong analytical and troubleshooting skills.
Excellent communication and documentation abilities.
Preferred Certifications:
CEH
CompTIA Security+
CySA+
GCIH
CISSP (preferred for L3)
Employment Type: Full-Time
Work Mode: Hybrid .
