Job DescriptionWe are seeking an experienced SOC Analyst – Level 2 with hands-on experience in cybersecurity operations and LogRhythm SIEM. The role involves conducting detailed security investigations, analyzing and handling security incidents, managing escalations, providing technical guidance to Level 1 analysts, preparing incident reports, and supporting uninterrupted 24/7 SOC operations.
Responsibilities
- * Conduct detailed security investigations to identify, analyze, and assess potential security threats and incidents.
- Perform in-depth security alert analysis and log correlation using LogRhythm SIEM and other relevant security monitoring tools.
- Analyze and handle security incidents, determine their severity and potential impact, and recommend appropriate response actions.
- Manage escalated security incidents from Level 1 analysts and ensure timely investigation and resolution in accordance with established procedures.
- Provide technical guidance and investigation support to Level 1 SOC analysts.
- Document investigation findings, incident details, response actions, and escalation outcomes accurately.
- Prepare incident reports and contribute to SOC operational and security reporting requirements.
- Coordinate incident-related activities with relevant technical teams to support containment, remediation, and resolution.
- Conduct shift handovers, ensuring continuity of investigations, clear communication of ongoing incidents, and tracking of pending actions.
- Perform operational follow-up activities to ensure incidents are appropriately tracked and resolved.
- Adhere to established SOC procedures, security policies, and operational requirements.
- Support continuous 24/7 SOC operations through rotational shift coverage.
Qualifications
- * Hands-on experience in a Security Operations Center (SOC) or cybersecurity operations environment, including advanced security investigations and incident handling.
- Practical experience with LogRhythm SIEM, including security alert analysis, investigation, and log correlation.
- Strong knowledge of security monitoring, alert triage, log analysis, and incident identification.
- Practical experience in incident handling, escalation management, investigation documentation, and reporting.
- Experience providing technical guidance and investigation support to Level 1 SOC analysts.
- Experience in SOC reporting, shift handover, and operational follow-up activities.
- Strong analytical, troubleshooting, communication, and problem-solving skills.
- Ability to work in a 24/7 rotational shift environment, including nights, weekends, and public holidays as required.
