Security Operations Center; Soc) Analyst

Madre Integrated Engineering | Full time

• Continuously monitor security alerts and events through SIEM and other monitoring platforms.
• Analyse and investigate suspicious activities, security incidents, and potential cyber threats.
• Classify, prioritise, and escal…
• Perform initial containment and support incident-response and recovery activities.
• Analyse logs from firewalls, endpoints, servers, applications, and network devices.
• Conduct threat hunting and identify indicators of compromise.
• Maintain incident records, investigation findings, and shift-handover reports.
• Fine-tune SIEM rules, alerts, dashboards, and use cases to reduce false positives.
• Coordinate with infrastructure, network, application, and cybersecurity teams during investigations.
• Stay updated on emerging threats, vulnerabilities, and attack techniques.

• Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, or a related discipline.
• Minimum 5 years of relevant experience in SOC operations or cybersecurity monitoring.
• Hands-on experience with SIEM, EDR, IDS/IPS, SOAR, and threat-intelligence platforms.
• Strong knowledge of incident detection, investigation, response, and escalation procedures.
• Good understanding of TCP/IP, DNS, HTTP/HTTPS, VPN, firewalls, and common network protocols.
• Familiarity with malware analysis, phishing investigations, threat hunting, and log analysis.
• Willingness to work rotational shifts in a 24/7 SOC environment, if required.
• Certifications such as CompTIA Security+, CySA+, CEH, GCIH, or equivalent are preferred.
• Strong analytical, documentation, and communication skills.
• .