We are seeking an experienced Senior SOC Analyst with 4–6 years of hands-on Security Operations Center (SOC) experience to strengthen our cybersecurity operations. The role involves continuous monitoring, advanced threat detection, incident investigation, and response across enterprise environments. The ideal candidate will have strong exposure to SIEM platforms, with a strong preference for Elastic Stack, and hold relevant industry-recognized, non-product-specific cybersecurity certifications.
Monitor, analyze, and respond to security events and alerts generated from SIEM and security monitoring tools
Perform in-depth investigation of security incidents, including malware, phishing, intrusion attempts, and suspicious activities
Lead and support incident response activities, including containment, eradication, and recovery
Conduct root cause analysis and prepare detailed incident reports and post-incident reviews
Tune SIEM rules, correlation logic, and detection use cases to reduce false positives and improve detection accuracy
Collaborate with threat intelligence, vulnerability management, and IT teams to strengthen overall security posture
Mentor junior SOC analysts and provide guidance during escalated security incidents
Ensure adherence to security policies, procedures, and compliance requirements
4–6 years of hands-on experience working in a Security Operations Center (SOC)
Strong experience with SIEM platforms; Elastic Stack experience is highly preferred
Proven experience in security monitoring, incident detection, and incident response
Good understanding of networking concepts, operating systems, and common attack vectors
Relevant cybersecurity certifications (non-product specific) such as CEH, GCIA, GCIH, CISSP (Associate), or equivalent
Strong analytical, documentation, and communication skills
Ability to work in shifts and handle high-pressure incident scenarios
SIEM monitoring, Elastic Stack, incident response, threat analysis, log analysis, malware investigation, phishing analysis, network security, endpoint security, alert triage, root cause analysis, threat intelligence, security documentation, SOC operations