SOC Analyst (L3)

• Responsible for monitoring, analyzing, and responding to complex cybersecurity incidents within large and complex network environments.
• The role involves SIEM and SOAR operations, threat hunting, incident response, event monitoring, security analytics, and collaboration with cross-functional teams to strengthen organizational cybersecurity posture and incident response capabilities.

Requirement/Must Have:

• Experience working with large and complex network environments.
• Strong knowledge of SIEM tools, preferably Splunk.
• Experience with SOAR tools, preferably Tines.
• Hands-on experience with EDR platforms, preferably CrowdStrike.
• Knowledge of the MITRE ATT&CK framework.
• Strong understanding of cybersecurity threats and recent cybersecurity trends.
• Experience in threat analysis, threat hunting, and incident response.
• Experience analyzing and responding to security incidents in a structured manner.
• Knowledge of network security, system security, and endpoint security.
• Experience with event monitoring, incident analysis, and escalation management.
• Experience creating rules in SIEM platforms.
• Strong knowledge of Windows, Linux, and Mac operating systems.
• Understanding of AI usage in cybersecurity.
• Ability to work in a 24x7 operational environment.
• Strong analytical and problem-solving skills.
• Strong attention to detail and organizational skills.

Experience:

• Experience with SIEM event and incident analytics.
• Experience producing monthly, weekly, and daily security reporting.
• Experience providing log analysis summaries and security recommendations.
• Experience performing advanced incident triage and collaborating with cross-functional teams.
• Experience preparing client-facing technical reports and presentations.
• Experience supporting continual system improvement initiatives.

Responsibilities:

• Review escalated SIEM incidents and validate true positives.
• Monitor, analyze, and respond to cybersecurity incidents.
• Provide SIEM event and incident analytics support.
• Perform advanced triage and coordinate with internal teams, third parties, and customer contacts.
• Generate monthly trend and security analysis reports.
• Provide log analysis summaries and recommendations for incident detection and protection.
• Support event monitoring, analysis, and escalations.
• Assist with content management inputs for SIEM platforms.
• Liaise between cross-functional teams during security incidents.
• Assist in preparing security incident response reports.
• Recommend protection and mitigation strategies based on lessons learned exercises.
• Contribute to continuous improvement initiatives within security operations.

Should Have:

• Experience with client-facing technical reporting and presentations.
• Willingness to travel occasionally as required.

Skills:

• Splunk.
• Tines.
• CrowdStrike.
• SIEM and SOAR platforms.
• Threat hunting.
• Incident response.
• Security analytics.
• Network security.
• Endpoint security.
• Windows, Linux, and Mac administration.
• MITRE ATT&CK framework.
• Log analysis.
• Cybersecurity reporting.

Qualification And Education:

• Bachelor s degree in Cybersecurity, Information Technology, Computer Science, or related field preferred.