Senior L2 SOC Analyst
Description
Looking for a senior SOC professional who can go beyond alert monitoring and take ownership of complex investigations, detection engineering and proactive threat hunting.
What we need:
- 10+ years in security, with at least 6 years of hands-on SOC L2/L3 investigation experience.
- Strong experience with CrowdStrike Falcon, Falcon Next-Gen SIEM/LogScale and Falcon Fusion SOAR.
- Ability to correlate endpoint, identity, cloud and network evidence during investigations.
- Strong detection engineering skills, including writing/tuning SIEM rules and reducing false positives.
- Threat hunting across identity abuse, persistence, lateral movement and living-off-the-land techniques.
- Working knowledge of Entra ID, Azure, Active Directory, M365 and MITRE ATT&CK.
- Ability to lead shifts, mentor analysts and drive investigation quality.