SOC Analyst

Key Responsibilities

• Monitor and analyze security alerts using tools such as SIEM, IDS/IPS, and EDR.
• Perform initial triage and investigation of security incidents, escalating as needed.
• Assist in responding to threats such as phishing, malware, and suspicious network or cloud activity.
• Support incident response efforts, including containment and recovery activities.
• Conduct basic threat hunting and IOC analysis under senior analyst guidance.
• Help maintain and improve security documentation, playbooks, and SOPs.
• Collaborate with IT, Cloud, and DevOps teams to support security best practices.
• Participate in ongoing training and learning to build skills in incident response, threat intelligence, and detection engineering.
• Use AI-assisted tools (including LLMs) to support alert triage, investigation, and documentation.
• Assist in evaluating AI-driven detections and automations to improve SOC efficiency.
• Learn best practices for securely using generative AI in security operations.

Required Qualifications

• 1–2 years of experience in information security, IT, or a related field.
• Foundational understanding of security concepts such as threat detection, incident response, and networking.
• Familiarity with SIEM platforms (e.g., Splunk, Chronicle) and endpoint or network security tools.
• Basic knowledge of cloud environments (AWS, GCP, or Azure) is a plus.
• Strong analytical and problem-solving skills.
• Ability to work collaboratively and communicate clearly within a team.

Preferred Qualifications

• Exposure to scripting or automation (e.g., Python, Bash).
• Familiarity with threat intelligence, basic forensics, or vulnerability management.
• Security certifications such as Security+, CEH, or similar.