SECURITY OPERATIONS CENTER (SOC) ANALYST

SECURITY OPERATIONS CENTER (SOC) ANALYST

Responsibilities

• Continuously monitor security alerts and events through SIEM and other monitoring platforms.
  
• Analyse and investigate suspicious activities, security incidents, and potential cyber threats.
  
• Classify, prioritise, and escalate security incidents according to established procedures.
  
• Perform initial containment and support incident-response and recovery activities.
  
• Analyse logs from firewalls, endpoints, servers, applications, and network devices.
  
• Conduct threat hunting and identify indicators of compromise.
  
• Maintain incident records, investigation findings, and shift-handover reports.
  
• Fine-tune SIEM rules, alerts, dashboards, and use cases to reduce false positives.
  
• Coordinate with infrastructure, network, application, and cybersecurity teams during investigations.
  
• Stay updated on emerging threats, vulnerabilities, and attack techniques.
  

Requirements

• ​
  

Requirements

• Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, or a related discipline.
  
• Minimum 5 years of relevant experience in SOC operations or cybersecurity monitoring.
  
• Hands-on experience with SIEM, EDR, IDS/IPS, SOAR, and threat-intelligence platforms.
  
• Strong knowledge of incident detection, investigation, response, and escalation procedures.
  
• Good understanding of TCP/IP, DNS, HTTP/HTTPS, VPN, firewalls, and common network protocols.
  
• Familiarity with malware analysis, phishing investigations, threat hunting, and log analysis.
  
• Willingness to work rotational shifts in a 24/7 SOC environment, if required.
  
• Certifications such as CompTIA Security+, CySA+, CEH, GCIH, or equivalent are preferred.
  
• Strong analytical, documentation, and communication skills.
  
• .