Senior Analyst

Job Purpose Summary:

The Senior SOC Analyst will be a key member of the internal Security Operations Center (SOC), responsible for proactively monitoring, analyzing, and responding to cybersecurity incidents and threats. This position involves advanced threat hunting, incident response, vulnerability analysis, and coordination with internal teams to strengthen the organization’s security posture. The role will leverage cutting-edge security tools and methodologies to protect critical systems and data.

Key Responsibilities:

Threat Monitoring & Incident Response

• Monitor and analyze logs, network traffic, IDS/IPS, and endpoint alerts for potential security incidents.
• Conduct in-depth analysis of network and host activity to detect anomalous behavior or signs of compromise.
• Triage and escalate security incidents based on established processes; manage investigations through resolution.
• Coordinate with the engineering team to fine-tune security device configurations and improve detection capabilities.
• Create and issue detailed investigation and post-incident reports, including root cause and mitigation analysis.

Threat Hunting & Analysis

• Perform proactive threat hunting activities using EDR tools and other security platforms.
• Research emerging threats, vulnerabilities, and countermeasures.
• Advise on mitigation strategies and support containment and remediation efforts.
• Compose and distribute alert notifications to stakeholders as needed.

Governance & Process Improvement

• Contribute to the continuous enhancement of SOC procedures, playbooks, and response protocols.
• Lead "after-action" reviews to document lessons learned and identify opportunities for improvement.
• Mentor junior analysts and help build a strong SOC team culture.
• Work with management to identify tool enhancements and drive innovation.

Education & Certifications:

• Bachelor's degree in Computer Science, Information Security, or a related technical field.
• Mandatory certifications: CEH, CISSP, CISM, CISA, or CySA+.
• SIEM vendor certification or security technology certifications (preferred).

Experience Requirements:

• Minimum 6 years in a cybersecurity/SOC role in banking, large enterprise, or MSSP environments.
• Proven experience in Level 3 SOC Analyst responsibilities, including advanced threat analysis and incident response.

Key Skills & Competencies:

• Strong knowledge of:
• Security architectures, firewalls, EDR, and threat intelligence tools.
• Root cause analysis of malware infections and advanced persistent threats.
• SIEM platforms (e.g., Splunk, QRadar, ArcSight).
• Incident response methodologies and forensic investigation techniques.
• Excellent understanding of evolving cyber threats, vulnerabilities, and mitigation strategies.
• Proficient in writing technical reports and playbooks for internal use.
• Strong multitasking skills and ability to perform under pressure.
• Excellent verbal and written communication skills.
• Strong interpersonal and mentoring skills.