Monitor, analyze, and correlate security events across SIEM platforms, EDR/XDR solutions, IDS/IPS systems, Threat intelligence feeds
Investigate and validate security incidents, determine root cause
Perform deep-dive analysis of suspicious activity
Conduct incident response activities including containment, eradication, and recovery support
Develop detailed incident reports, timelines, post-incident summaries
Recommend improvements to SOC playbooks, detection rules
Perform proactive threat hunting using MITRE ATT&CK framework
Collaborate with engineering teams to tune and optimize security tools
Support dashboard creation, reporting, and SOC performance metrics
Serve as a subject matter expert (SME) interacting with stakeholders
Document SOC processes, runbooks, incident handling procedures
Coordinate with SOC teams, engineering teams, and agency stakeholders

SOC Analyst – Contract

Key skills