IT Security Analyst
About the role
This is a Level-2 Security Operations Centre (SOC) role focused on timely response to security alerts using technology solutions and documented processes on a 24 x 7 x 365 basis. You will act as a point of escalation for Level-1 analysts in 12-hour shift rotation, escalate suspected incidents to L3 with detailed analysis and actionable recommendations, and work closely with the SOC Head to improve security operations.
Key responsibilities
Respond to security alerts using a combination of technology solutions and documented processes on a 24 x 7 x 365 basis
Act as a point of escalation for Level-1 analysts in 12-hour shift rotation
Escalate suspected incidents to L3 with detailed analysis and actionable recommendations
Interface and collaborate with other teams for incident escalations and resolution
Perform due diligence and in-depth analysis on escalated security alerts from Level-1 analysts
Assist in threat hunting activities to identify potential vulnerabilities
Involve in incident response steps, perform root cause analysis and recommend solutions to mitigate risks
Support Level-1 alert analysis by providing advanced analysis services and recommending containment and remediation processes
Mentor Level-1 analysts to improve detection capability within the SOC and provide feedback on work quality
Challenge and suggest improvements on existing processes and procedures in the information security environment
About you
Bachelor's degree in Computer Science, Information Security, or a related field
Hands-on experience in Security Operations Centre (SOC) environments, preferably in L2 or equivalent roles
Strong analytical and problem-solving skills, with the ability to perform root cause and threat analysis
Proficiency in investigative tools such as SIEM, packet capture analysis, host forensics, and memory analysis tools
Solid understanding of the cybersecurity threat landscape, including tools, tactics, and techniques used in attacks
Excellent communication skills, both written and verbal, with the ability to convey complex information effectively
Demonstrated ability to work collaboratively in a team environment and mentor junior analysts
Relevant industry certifications (e.g., SANS, GIAC, CompTIA Security+, CEH, or similar) are an advantage