Security Analyst

Job Overview Level Up Talent Solutions is looking for an experienced Security Analyst / SOC Analyst to support Security Operations Center activities, including real-time security monitoring, incident detection, investigation, response, vulnerability assessment, and security event analysis. The role will work closely with Network, Infrastructure, Server, and Application teams to identify, investigate, contain, and remediate security threats while ensuring incidents are handled within defined SLAs.

The ideal candidate has hands-on experience with SIEM, EDR, firewalls, IDS/IPS, Windows/Linux environments, Active Directory, and ITSM/ticketing platforms.

Key Responsibilities

Monitor and analyze security alerts and events from SIEM, EDR, firewalls, IDS/IPS, proxies, antivirus solutions, databases, applications, and Windows/Linux servers. Investigate security events and determine whether alerts are false positives or confirmed security incidents. Use IBM QRadar and/or Splunk to correlate events, analyze logs, detect suspicious activity, and investigate potential security breaches.

Perform root cause analysis and manage security incidents in accordance with established incident response procedures. Monitor network traffic, system logs, sign-in activity, and access privileges for anomalous or potentially malicious behavior. Investigate user access and authentication activity through Active Directory and related security controls.

Escalate confirmed incidents to the appropriate technical teams and track remediation through closure. Create, manage, and monitor incident tickets using Freshservice, Service. Now, or similar ticketing platforms, ensuring SLA compliance. Configure and onboard logs from firewalls, IDS/IPS, Windows/Linux servers, databases, and applications into security monitoring platforms.

Conduct vulnerability assessments across operating systems, servers, applications, ports, hardware, and network infrastructure. Coordinate scheduled vulnerability scans and track remediation of identified risks. Prepare security incident, vulnerability, remediation, compliance, and operational reports. Collaborate with infrastructure, network, server, and application teams to resolve security issues.

Participate in incident reviews, knowledge-sharing sessions, and lessons-learned discussions to continuously improve SOC processes.

Requirements

Qualifications Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, Engineering, or a related field 3 to 5 years of relevant experience in Cybersecurity, Information Security, SOC Operations, or Security Operations Hands-on experience with SIEM, EDR, firewalls, and IDS/IPS Strong experience in security incident investigation, root cause analysis, and incident management Ability to monitor and analyze network traffic, security logs, and security events Experience using Freshservice or a similar ITSM/ticketing platform Experience conducting vulnerability assessments and tracking remediation Ability to prepare security operational reports, incident reports, and vulnerability reports Hands-on experience with IBM QRadar; exposure to Splunk is preferred Experience with endpoint security tools, preferably Crowd.

Strike Working knowledge of Forti. Gate or similar next-generation firewalls Good understanding of Windows and Linux server security Experience with Active Directory, user access privileges, and authentication/sign-in logs Knowledge of SLA-driven incident management and escalation procedures Strong analytical, troubleshooting, documentation, and communication skills