Security Operations Center (SOC) Analyst SIEM, SOAR, and EDR platforms

Description We are seeking a highly skilled Security Operations Center (SOC) Analyst with extensive experience in SIEM, SOAR, and EDR platforms. The ideal candidate will be responsible for monitoring security incidents, conducting threat intelligence analysis, and responding to security threats to protect our organization's information assets.

Responsibilities Monitor security alerts and incidents in SIEM, SOAR, and EDR platforms. Conduct threat intelligence analysis to identify and mitigate potential risks. Respond to security incidents and perform root cause analysis. Collaborate with IT teams to implement security measures and best practices. Prepare incident reports and documentation for compliance and audits. Stay updated with the latest security trends and technologies.

Skills and Qualifications 10-18 years of experience in security operations or related field. Proficiency in SIEM platforms (e.g., Splunk, ArcSight). Experience with SOAR tools (e.g., Palo Alto Cortex XSOAR, IBM Resilient). Hands-on experience with EDR solutions (e.g., CrowdStrike, SentinelOne). Strong understanding of threat intelligence frameworks and methodologies. Knowledge of incident response processes and procedures. Familiarity with security compliance standards (e.g., ISO 27001, NIST). Excellent analytical and problem-solving skills. Effective communication and teamwork abilities.

Education : Bachelor's/Master's degree in Computer Science, Cybersecurity, or related field; or equivalent hands-on experience. Professional experience : 10+ years SOC/L2 experience in investigations, threat hunting, and incident response. Preferred certifications : CompTIA CySA+ Microsoft SC200 (Security Operations Analyst) Elastic Certified SIEM Analyst CrowdStrike CCFR (Certified Falcon Responder) CrowdStrike CCFH (Certified Falcon Hunter) GIAC Certified Enterprise Defender (GCED) GIAC Certified Detection Analyst (GCDA) GIAC Certified Forensic Analyst (GCFA) GIAC Network Forensic Analyst (GNFA) GIAC Cyber Incident Leader (GCIL) .