SOC Analyst: Proactive Threat & Incident Response

Key Responsibilities

• Investigate and qualify L2 incidents escalated from L1
• Perform contextual investigation and analysis
• Proactively monitor and hunt through customer environments
• Manage security platforms to detect and respond to threats
• Provide recommendations and required mitigation
• Support client incident notification as needed
• SIEM use‑case support: correlation rule design, deployment and fine‑tuning
• Maintain and update SOC knowledge base
• Escalate to Level3 when required and support major incidents with assigned tasks
• Contribute to periodic reporting (weekly, monthly, quarterly, etc.)
• Monitor for attacks, intrusions, unusual activity