SOC Analyst T2

The SOC Level 2 (Tier 2. Analyst is responsible for advanced threat investigation, incident analysis, and response coordination. This role focuses on in-depth analysis of escalated security incidents, identifying root causes, performing containment guidance, and supporting continuous security improvement initiatives.

Key Responsibilities

Perform detailed investigation of escalated security incidents from Level 1 analysts Analyze endpoint, network, and log data to determine scope and impact of incidents Conduct threat hunting activities to identify undetected malicious behavior Perform root cause analysis and recommend remediation actions Validate and tune detection rules to reduce false positives Coordinate with IT and security teams for containment and remediation Document investigation findings and produce detailed incident reports Assist in developing and improving SOC playbooks and procedures Support 24/7 shift operations when required Requirements Required Skills: Strong understanding of networking concepts (TCP/IP, DNS, HTTP, SMB.)

Hands-on experience with SIEM tools (Splunk, Wazuh, QRadar.) Knowledge of endpoint detection tools (EDR/XDR platforms) Understanding of attack techniques and MITRE ATT&CK framework Ability to analyze logs from firewalls, endpoints, servers, and cloud environments Basic scripting knowledge (Python, Power. Shell, or Bash) Strong analytical and problem-solving skills Good written and verbal communication skills Education & Experience Bachelor’s degree in IT, Computer Science, Cybersecurity, or related field 2–4 years of experience in SOC, cybersecurity operations, or incident response Experience handling real security incidents is preferred Candidates must hold at least one certification in one of the following areas: Incident Response Digital Forensics Threat Hunting Malware Analysis Preferred certifications may include: ECTHP,ECDFP CHFI,ECIH GCIA ,GCIH,GCFA,GCFE Blue Team certifications Please note that this role is outsourced, and selected candidates will be deployed to work with external client organizations as part of project assignments.