SOC - Level 3 (L3) Analyst Responsibilities:
• Lead advanced security investigations, analyzing complex and sophisticated security incidents escalated from lower tiers for accurate identification and resolution.
• Collaborate with incident response teams, taking charge of in-depth forensics and root cause analysis to understand the full scope of security breaches.
• Develop and implement advanced correlation rules, use cases, and custom scripts to detect and respond to intricate and targeted cyber threats.
• Provide expert insights to cross-functional teams, offering strategic guidance on security posture enhancement and risk mitigation strategies.
• Oversee the deployment and management of cutting-edge security technologies, such as EDR, NDR, and UEBA solutions, to fortify threat detection capabilities.
• Lead threat hunting initiatives, proactively identifying hidden threats and persistent adversaries within the organization's infrastructure.
• Collaborate with threat intelligence teams to incorporate external threat intelligence into detection mechanisms, staying ahead of emerging threats.
• Serve as a technical leader during critical incidents, orchestrating response efforts, directing technical analysis, and managing communication.
• Develop and refine incident response playbooks, procedures, and protocols for consistent and effective handling of security incidents.
• Provide mentorship and guidance to junior SOC analysts, sharing expertise and knowledge to foster skill development within the team.
• Participate in table-top exercises and simulation scenarios to validate incident response plans and refine the organization's readiness.
• Collaborate with IT and engineering teams to enhance security controls, configure security tools, and implement network and endpoint security measures.
• Contribute to the creation and maintenance of security metrics and reports for executive management and stakeholders.
• Continuously evaluate and recommend new security technologies, methodologies, and processes to keep the SOC at the forefront of cyber defense.
Skills:
• Advanced Threat Analysis
• Incident Response Expertise
• Malware Analysis
• Intrusion Detection
• Threat Hunting
• Forensic Investigation
• SIEM Expertise
• Scripting and Automation
Certification (Optional but beneficial):
