Soc Analyst

We are seeking a proactive and detail-oriented SOC Analyst to monitor, detect, investigate, and respond to cybersecurity threats and security incidents across the organization's IT environment. The ideal candidate should have hands-on experience with security monitoring tools, incident response, threat analysis, and vulnerability management.

Key Responsibilities

• Monitor security events and alerts using SIEM tools.
• Investigate and analyze security incidents, alerts, and potential threats.
• Perform incident triage, containment, eradication, and recovery activities.
• Monitor network traffic and identify suspicious activities.
• Conduct threat hunting and malware analysis.
• Investigate phishing, ransomware, and other cyberattack incidents.
• Perform vulnerability assessments and recommend remediation actions.
• Create and maintain incident response reports and documentation.
• Collaborate with IT, infrastructure, and application teams to resolve security issues.
• Ensure compliance with security policies, standards, and best practices.
• Stay updated on emerging threats, vulnerabilities, and cybersecurity trends.

Required Skills

• Experience with SIEM tools such as Splunk, IBM QRadar, ArcSight, LogRhythm, or Microsoft Sentinel.
• Strong understanding of Cybersecurity Fundamentals.
• Knowledge of Incident Response and Security Operations processes.
• Experience in Threat Monitoring and Threat Hunting.
• Understanding of networking concepts such as TCP/IP, DNS, DHCP, VPN, and Firewalls.
• Hands-on experience with EDR/XDR tools (CrowdStrike, Defender, SentinelOne, Carbon Black).
• Knowledge of Vulnerability Management tools (Nessus, Qualys).
• Familiarity with IDS/IPS technologies.
• Understanding of MITRE ATT&CK Framework.
• Experience with Windows, Linux, and Active Directory environments.
• Good analytical, troubleshooting, and communication skills.