Perform SOC routines, create use cases for SIEM platforms, investigate alerts and anomalies, and participate in incident response
Prepare technical reports and participate in technical meetings with clients and in crisis rooms
Keep documentation up to date
Provide support and troubleshooting for SIEM platforms
Perform vulnerability analysis and provide recommendations
Review playbooks and support SOC Tier 1 (N1)

Knowledge of security architecture and protection components (Firewall, IPS, IDS, WAF, Proxy, anti-malware, Antivirus, etc.)
Knowledge of operating systems, including Linux/Unix and Windows
Experience with Security Information and Event Management (SIEM) tools
Knowledge of security tools to detect, prevent, and mitigate intrusions
Strong communication skills, customer service orientation, and problem-solving ability
Knowledge of SOC (Blue Team) activities (desirable)
Familiarity with types of cyber attacks, vulnerabilities, and mitigation measures for IT environments (desirable)
Ability to analyze data and logs generated by IT equipment and security solutions (desirable)
Knowledge of vulnerability management (desirable)
Hands-on SOC operational experience (a plus)
Knowledge of programming languages (e.g., Python) or strong code-reading skills (a plus)
CompTIA Security+ certification (a plus)
EXIN ISO/IEC 27001 certification (a plus)

SOC Analyst II

Key skills