Soc Analyst

Description:

We are seeking a skilled and motivated SOC Analyst with expertise that bridges the gap between L1 and L2 roles. The ideal candidate will have a solid foundation in security monitoring and incident response, along with hands-on experience in advanced threat analysis and proactive security measures. Proficiency in SIEM tools (e.g., Splunk), the MITRE ATT&CK framework, Cyber Kill Chain, and a strong understanding of vulnerabilities and threat management are essential.

Key Responsibilities
Monitor, analyze, and triage security alerts using SIEM tools like Splunk to identify and assess threats.
Conduct initial investigations and provide in-depth analysis of security incidents to determine the scope and impact.
Utilize the MITRE ATT&CK framework to identify and correlate adversary tactics, techniques, and procedures (TTPs).
Perform log correlation, packet analysis, and threat detection across diverse environments.
Manage vulnerabilities by assessing their impact, prioritizing remediation, and coordinating mitigation efforts.
Develop and fine-tune detection use cases, playbooks, and incident response workflows.
Conduct proactive threat hunting using SIEM and endpoint detection tools to identify unknown threats.
Leverage the Cyber Kill Chain to enhance detection, response, and prevention strategies.
Collaborate with cross-functional teams to implement security controls and ensure best practices are followed.
Document and report on incidents, including root cause analysis and actionable recommendations for improvement.