SOC Analyst L2

We are seeking a highly skilled and experienced Cyber Security Operations Analyst - L2 to join our dynamic Security Operations Center (SOC) team. The ideal candidate will be responsible for leading Level 2 (L2) investigations, serving as the point of contact (POC) for all clients, and conducting incident response and support sessions. This role requires a deep understanding of cybersecurity principles, excellent problem-solving skills, and the ability to work collaboratively with clients and team members.

• L2 Investigations: Lead and manage Level 2 investigations to identify, analyze, and respond to security incidents. Ensure timely and effective resolution of incidents while maintaining detailed documentation.
• Point of Contact (POC) for Clients: Act as the primary point of contact for all clients, addressing their cybersecurity concerns and providing expert guidance. Build and maintain strong client relationships to ensure satisfaction and trust.
• Troubleshooting Sessions: Conduct troubleshooting sessions with clients to resolve complex security issues. Collaborate with clients to understand their needs and provide tailored solutions.
• Creation of Standard Operating Procedures (SOPs): Develop, document, and maintain comprehensive SOPs for various security operations and processes. Ensure SOPs are up-to-date and aligned with industry best practices.
• Fine Tuning and Use Case Creation: Continuously fine-tune security tools and technologies to enhance detection and response capabilities. Create and implement use cases to address emerging threats and vulnerabilities.
• Threat Hunting: Proactively hunt for threats within the organization’s network and systems. Utilize advanced threat hunting techniques to identify and mitigate potential security risks.
• Threat Intelligence (TI) Advisories Dissemination: Disseminate threat intelligence advisories to relevant stakeholders. Ensure timely communication of emerging threats and vulnerabilities.
• SIEM Health Analytics
  :
  Monitor and analyze the health and performance of Security Information and Event Management (SIEM) systems. Ensure SIEM systems are functioning optimally and provide actionable insights.
• Reporting: Prepare and deliver monthly, weekly, and incident reports to management and clients. Provide detailed analysis and recommendations based on findings.
• SOC Maturity and Gap Analysis: Conduct maturity and gap analysis of the SOC to identify areas for improvement. Develop and implement strategies to enhance SOC capabilities and effectiveness.
• Training and Mentorship: Provide training and mentorship to new joiners and junior analysts. Aid in investigations and ensure they are equipped with the necessary skills and knowledge.