Act as the final escalation point for security incidents, conducting deep-dive investigations and forensic analysis.
Develop, implement, and enhance security monitoring and threat-hunting processes.
Lead incident response efforts, including containment, eradication, and recovery from security breaches.
Conduct threat intelligence analysis and proactively identify emerging security threats.
Tune and optimize security tools such as SIEM, IDS/IPS, endpoint protection, and vulnerability management solutions.
Collaborate with internal teams and external vendors to improve security architecture and processes.
Provide guidance and mentorship to L1 and L2 SOC analysts.
Develop and maintain security policies, playbooks, and incident response procedures.
Ensure compliance with industry regulations and security best practices.
Conduct red teaming exercises and penetration testing simulations.

Bachelor’s degree in Computer Science, Cybersecurity, or a related field.
5+ years of experience in a Security Operations Center (SOC) or cybersecurity role.
Strong expertise in SIEM tools (Splunk, QRadar, Sentinel, etc.) and security frameworks (MITRE ATT&CK, NIST, ISO 27001).
Hands-on experience with intrusion detection, malware analysis, and forensic investigations.
Proficiency in scripting and automation (Python, PowerShell, or Bash).
Security certifications such as CISSP, CISM, GCIH, GCFA, or OSCP preferred.
Strong problem-solving, communication, and leadership skills.

Senior SOC Analyst – L3

Key skills