Sr. SOC Analyst (Rotational shift)

The ideal candidate will have experience monitoring security events, investigating alerts, and responding to security incidents in a fast-paced Security Operations Center (SOC). This role requires hands-on experience with CrowdStrike, ServiceNow, SIEM platforms, and security monitoring tools while working in a 24x7 operational environment.

Key Responsibilities

• Monitor enterprise security events using SIEM platforms and endpoint detection tools.
• Perform initial triage and analysis of security alerts generated by CrowdStrike and other security technologies.
• Investigate suspicious activities, malware detections, phishing attempts, unauthorized access, and policy violations.
• Create, update, and manage security incidents through ServiceNow.
• Follow established incident response procedures and escalate security incidents when required.
• Analyze logs from endpoints, servers, firewalls, Active Directory, cloud environments, and network devices.
• Review security events for false positives and validate legitimate threats.
• Support 24x7 Security Operations Center activities, including shift-based monitoring.
• Collaborate with Tier II/Tier III analysts during incident investigations.
• Document investigation findings, actions taken, and recommendations.
• Maintain accurate incident records and ensure compliance with operational procedures.
• Participate in daily SOC handoff meetings and shift transition activities.

Required Qualifications

• Associate''s or Bachelor''s degree in Cybersecurity, Information Technology, Computer Science, or a related field.
• 1 5 years of experience in a Security Operations Center (SOC) or Information Security Operations role.
• Experience working in a 24x7 SOC environment.
• Strong understanding of cybersecurity fundamentals.
• Experience monitoring and responding to security alerts.
• Familiarity with incident response lifecycle.
• Knowledge of Windows, Linux, and networking fundamentals.
• Experience analyzing system, application, and security logs.
• Understanding of common cyber threats, attack vectors, and malware.
• Excellent analytical and troubleshooting skills.
• Strong verbal and written communication skills.
• Ability to prioritize multiple security incidents simultaneously.