Job Description
• Monitor, triage, and investigate security alerts across endpoint, identity, email, network, cloud, and SaaS environments.
• Handle security incidents from initial detection through investigation, documentation, escalation, and resolution.
• Distinguish between true-positive, false-positive, and benign security activity.
• Recommend improvements to detections, investigation processes, runbooks, and security automations.
• Work closely with other internal teams during investigations.
• Maintain a professional and service-oriented approach when communicating with employees.
• Participate in the SOC shift rotation and support continuous security operations.
Qualifications
• Up to two years of experience as a SOC Analyst or in a similar cybersecurity role.
• Comfortable working in a dynamic environment and handling complex problems.
• Strong analytical thinking, curiosity, and problem-solving skills.
• Good understanding of IT infrastructure, operating systems, and networking fundamentals.
• Understanding of common cyber threats and attack techniques, including phishing, malware, ransomware, credential theft, and supply-chain attacks.
• Strong written and verbal English communication skills.
SOC Analyst