SOC Investigator

Description Provide 24/7 visibility, proactive threat detection, rapid investigation, and continuous threat hunting. The SOC is the front line of defense and the backbone of security operations.

Responsibilities

Conduct full incident investigations on medium- and high-severity events Correlate telemetry from multiple sources (EDR, network, IAM, logs) Coordinate with response teams for containment and remediation Perform root-cause and impact analysis Requirements Deep understanding of attacker lifecycle and kill chain Memory forensics and host artifact analysis Packet capture and traffic analysis Scripting for enrichment and automation Tools & Platforms EDR / SOAR platforms Volatility / FTK – memory analysis Wireshark – network inspection Threat Intel platforms – enrichment & pivoting