Job Objective
As a Senior SOC Analyst, you are responsible for monitoring, analyzing, and responding to cybersecurity threats and incidents. You will stay current with the latest security trends, vulnerabilities, and attack techniques, and communicate relevant findings to the team. You will analyze security data from multiple sources, assess the scope and impact of security incidents, and support effective response to protect organizational assets.
Main Responsibilities
- Analyze and correlate security log data from multiple heterogeneous security systems and devices.
- Provide Incident Response (IR) support when security events are confirmed as actionable incidents.
- Conduct threat and vulnerability analysis and provide security advisory services.
- Recommend and enforce network security policies, standards, and procedures.
- Assist in developing and improving incident response plans, workflows, and SOPs.
- Perform detailed analysis of network security appliances and monitor network traffic for anomalies.
- Escalate security incidents according to defined policies and procedures.
- Analyze and respond to newly discovered software and hardware vulnerabilities.
- Investigate, document, and report information security incidents and emerging threat trends.
- Collaborate and share intelligence with SOC team members and other departments.
- Execute additional cybersecurity or technical projects as assigned by management.
- Stay updated with evolving cybersecurity threats, tools, and technologies.
- Deliver cybersecurity awareness sessions and training to employees.
Qualifications
- Bachelor’s degree in Computer Science, Information Security, or a related field.
Certifications (Preferred)
- CCNA, CompTIA Security+, CEH, or equivalent.
- Minimum 4+ years of experience in SOC, NOC, or cybersecurity operations.
- Hands-on experience in security monitoring, incident response, and threat analysis is preferred.
- Professional proficiency in Local Language and English is required.
- Strong knowledge of TCP/IP networking and security protocols (including SMTP, DNS, HTTP, etc.).
- Solid understanding of cybersecurity principles, controls, and defensive techniques.
- Experience with Kali Linux and common security tools (SIEM, IDS/IPS, EDR, Vulnerability Scanners).
- Understanding of penetration testing concepts (Black-box, White-box, and Grey-box).
- Ability to make quick and accurate decisions during incident response.
- Strong documentation and incident reporting skills.
- Organized in managing security alerts, tickets, and case handling.
- Strong analytical and critical thinking skills.
- Problem-solving ability under pressure.
- Excellent communication and teamwork skills.
- Professional, proactive, and security-driven mindset.
- SIEM platforms (Splunk, QRadar, Sentinel, Elastic).
- Threat Intelligence & MITRE ATT&CK framework knowledge.
- EDR/XDR tools (CrowdStrike, Microsoft Defender, SentinelOne).
- SOAR / Automation capabilities.
- Cloud security fundamentals (AWS, Azure, or GCP environments).
- Log analysis & scripting (Python, PowerShell) for automation and parsing.
- Compliance frameworks awareness: ISO 27001, NIST, SOC 2.
