Monitor security events and alerts from various security tools such as SIEM, EDR and other security tools.
Respond to security incidents and perform incident triage to contain the incident and prevent further damage.
Develop and maintain security incident response plans and procedures.
Collaborate with other members of the security team to identify and implement security best practices and procedures.
Lead or assist in incident response activities, including containment, eradication, and recovery.
Work closely with other security and IT teams to coordinate and execute incident response plans.
Document incident details, actions taken, and lessons learned for continuous improvement.

Bachelor's degree in Computer Science, Information Security, or a related field.
4+ years of experience working in a Security Operations Center or a similar role.
Strong knowledge of cybersecurity technologies such as SIEM, SOAR, IDS/IPS, firewalls, and endpoint protection/XDR.
Experience in writing playbooks and processes.
Strong knowledge of security & compliance frameworks such as NIST, ISO, and CIS.
Strong analytical and problem-solving skills.
Excellent communication and interpersonal skills.
Excellent knowledge of English language is required.
Ability to work effectively under pressure and prioritize tasks.
Certifications such as CISSP, GIAC, CEH, CSA and CompTIA Security+ will be considered a plus.

SOC Analyst, Level 2

Key skills