L3 SOC Analyst

We are looking for an experienced L3 SOC Analyst to join a fast-paced, 24x7 Security Operations Centre. This role is perfect for someone who thrives on ownership of complex security incidents
, alert tuning
, and ensuring consistent, high-quality incident response across the SOC.

You will be responsible for analyzing and responding to high‑severity security events, optimizing SOC processes, and presenting findings to both technical and non‑technical stakeholders.

• Investigate and triage critical security alerts from detection to closure, including validation, severity assessment, containment guidance, escalation, and root cause analysis.
• Determine true positive vs. false positive alerts using context enrichment, correlation across data sources, and anomaly detection.
• Tune and improve alert rules to reduce noise and improve SOC efficiency; quantify improvements such as alert reduction and MTTR.
• Lead complex security incidents (e.g., ransomware, BEC, insider threats, cloud breaches) with clear decision‑making and ownership.
• Communicate major incident findings and risk impact effectively to non‑technical stakeholders.
• Develop and improve SOC playbooks and decision trees, ensuring consistency in analyst decision‑making.
• Maintain and follow SOPs, conduct peer reviews, and support quality assurance initiatives in the SOC.

• Proven experience as a SOC Analyst (L3) in a 24x7 security operations environment.
• Strong technical expertise in SIEM platforms, EDR, network monitoring, and incident investigation.
• Experience in tuning security alerts and improving SOC processes.
• Able to take ownership of incidents and make operational decisions under pressure.
• Excellent communication skills with the ability to present technical issues to non‑technical stakeholders.
• Familiarity with developing and improving SOC playbooks and SOPs.
• Strong analytical mindset with attention to detail and process adherence.

• Fully remote role with a collaborative SOC team.
• Opportunity to work on complex, high‑impact security incidents.
• Grow your technical and leadership skills in a mature SOC environment