SOC Analyst L2

Job Summary: We are seeking a highly skilled and experienced Cyber Security Operations Analyst - L2 to join our dynamic Security Operations Center (SOC) team. The ideal candidate will be responsible for leading Level 2 (L2) investigations, serving as the point of contact (POC) for all clients, and conducting incident response and support sessions. This role requires a deep understanding of cybersecurity principles, excellent problem-solving skills, and the ability to work collaboratively with clients and team members. Key Responsibilities: • L2 Investigations: Lead and manage Level 2 investigations to identify, analyze, and respond to security incidents. Ensure timely and effective resolution of incidents while maintaining detailed documentation. • Point of Contact (POC) for Clients: Act as the primary point of contact for all clients, addressing their cybersecurity concerns and providing expert guidance. Build and maintain strong client relationships to ensure satisfaction and trust. • Troubleshooting Sessions: Conduct troubleshooting sessions with clients to resolve complex security issues. Collaborate with clients to understand their needs and provide tailored solutions. • Creation of Standard Operating Procedures (SOPs): Develop, document, and maintain comprehensive SOPs for various security operations and processes. Ensure SOPs are up-to-date and aligned with industry best practices. • Fine Tuning and Use Case Creation: Continuously fine-tune security tools and technologies to enhance detection and response capabilities. Create and implement use cases to address emerging threats and vulnerabilities. • Threat Hunting: Proactively hunt for threats within the organization’s network and systems. Utilize advanced threat hunting techniques to identify and mitigate potential security risks. • Threat Intelligence (TI) Advisories Dissemination: Disseminate threat intelligence advisories to relevant stakeholders. Ensure timely communication of emerging threats and vulnerabilities. • SIEM Health Analytics: Monitor and analyze the health and performance of Security Information and Event Management (SIEM) systems. Ensure SIEM systems are functioning optimally and provide actionable insights. • Reporting: Prepare and deliver monthly, weekly, and incident reports to management and clients. Provide detailed analysis and recommendations based on findings. • SOC Maturity and Gap Analysis: Conduct maturity and gap analysis of the SOC to identify areas for improvement. Develop and implement strategies to enhance SOC capabilities and effectiveness. • Training and Mentorship: Provide training and mentorship to new joiners and junior analysts. Aid in investigations and ensure they are equipped with the necessary skills and knowledge. Qualifications: • Bachelor’s degree in Cybersecurity, Information Technology, or a related field. • 5+ years of experience in SOC or similar cybersecurity role. • Strong knowledge of cybersecurity principles, threat landscapes, and incident response methodologies. • Proficiency in using SIEM tools including Qradar, Log rhythm & Microsoft Sentinel, threat intelligence platforms, and other security technologies. • Experienced in SOAR platform administration and the end-to-end implementation of automated security playbooks. • Excellent analytical, problem-solving, and communication skills. • Ability to work effectively under pressure and manage multiple priorities. • Relevant certifications such as BTL2, CySA+, CEH, SC-200, ECIR, eCTHP or equivalent are preferred. Show more Show less

Key Responsibilities: L2 Investigations: Lead and manage Level 2 investigations to identify, analyze, and respond to security incidents. Ensure timely and effective resolution of incidents while maintaining detailed documentation. Point of Contact (POC) for Clients: Act as the primary point of contact for all clients, addressing their cybersecurity concerns and providing expert guidance. Build and maintain strong client relationships to ensure satisfaction and trust. Troubleshooting Sessions: Conduct troubleshooting sessions with clients to resolve complex security issues. Collaborate with clients to understand their needs and provide tailored solutions. Creation of Standard Operating Procedures (SOPs): Develop, document, and maintain comprehensive SOPs for various security operations and processes. Ensure SOPs are up-to-date and aligned with industry best practices. Fine Tuning and Use Case Creation: Continuously fine-tune security tools and technologies to enhance detection and response capabilities. Create and implement use cases to address emerging threats and vulnerabilities. Threat Hunting: Proactively hunt for threats within the organization’s network and systems. Utilize advanced threat hunting techniques to identify and mitigate potential security risks. Threat Intelligence (TI) Advisories Dissemination: Disseminate threat intelligence advisories to relevant stakeholders. Ensure timely communication of emerging threats and vulnerabilities. SIEM Health Analytics: Monitor and analyze the health and performance of Security Information and Event Management (SIEM) systems. Ensure SIEM systems are functioning optimally and provide actionable insights. Reporting: Prepare and deliver monthly, weekly, and incident reports to management and clients. Provide detailed analysis and recommendations based on findings. SOC Maturity and Gap Analysis: Conduct maturity and gap analysis of the SOC to identify areas for improvement. Develop and implement strategies to enhance SOC capabilities and effectiveness. Training and Mentorship: Provide training and mentorship to new joiners and junior analysts. Aid in investigations and ensure they are equipped with the necessary skills and knowledge.