Senior SOC Analyst

What You Will Do

• Triage and investigate Tier 2 escalated security alerts across SIEM platforms such as Splunk, Microsoft Sentinel, or Elastic Security to determine scope, impact, and root cause.
• Write, tune, and maintain custom detection rules, correlation searches, and alert logic to reduce false positives and surface emerging threats.
• Perform proactive threat hunting using frameworks like MITRE ATT&CK to identify adversary techniques and unknown threats.
• Orchestrate and automate incident response workflows using SOAR platforms such as Palo Alto XSOAR, Splunk SOAR, or Microsoft Sentinel Playbooks.
• Conduct malware analysis, log forensics, and endpoint investigations using EDR tools such as CrowdStrike Falcon, SentinelOne, or Microsoft Defender for Endpoint.
• Produce detailed incident reports and post-mortem analyses for client security leadership, recommending remediation steps and detection improvements.
• Collaborate during shift handoffs and real-time incident escalations with international SOC teams.

What We’re Looking For

• 4+ years of SOC analyst or security operations experience, with at least 2 years at Tier 2 or above.
• Hands-on proficiency with at least one major SIEM platform (Splunk, Microsoft Sentinel, Elastic Security, or equivalent) including SPL, KQL, or similar query languages.
• Experience with EDR platforms such as CrowdStrike Falcon, SentinelOne, or Carbon Black for endpoint investigation and response.
• Working knowledge of SOAR tools and automated playbook development for incident response.
• Relevant certifications such as CompTIA CySA+, GCIA, GCIH, or SC-200 are a strong plus.
• Flawless English communication skills to deliver incident briefs and reports directly to security leadership.