Cybersecurity SOC Analyst

Job Purpose

The Cybersecurity SOC Analyst is responsible for monitoring and analyzing security events within the Security Operations Center (SOC) to detect, investigate, and respond to potential cybersecurity threats. This role ensures timely identification and escalation of security incidents, supports containment and mitigation efforts, and contributes to the development of security monitoring strategies and playbooks.

• Ensure Compliance to Rules and Regulations
• Ensures compliance with all Company standards and relevant industry standards during all aspects of work.
• Ensures adherence to the Company’s Code of Conduct, Internal Rules, and Regulations at all times.

• Monitor:
  Watch Security Information and Event Management (SIEM) systems and other security tools for suspicious activity.
• Triage:
  Analyze security alerts to determine their severity, validity, and potential impact.
• Escalate:
  Report incidents to the IT Security Manager or appropriate teams according to established procedures.
• Document:
  Record security events and incidents, including relevant technical details and forensic analysis.
• Mitigate:
  Perform basic incident containment and initial mitigation activities.
• Develop:
  Contribute to the creation and maintenance of security monitoring playbooks and Standard Operating Procedures (SOPs).
• Research:
  Stay up-to-date on the latest global security threats, zero-day vulnerabilities, and TTPs (Tactics, Techniques, and Procedures).
• Train:
  Participate in security awareness training and red-team/blue-team exercises.
• Collaborate:
  Work with other security team members to continuously improve the organization's overall security posture.

Perform any other tasks as assigned by management.

Bachelor’s Degree in Computer Science, Information Security, or a related field (or equivalent professional experience).

Minimum 1 year of experience in security monitoring or IT support, with foundational knowledge of security incident response procedures.

* Hands-on experience with SIEM tools (e.g., Splunk, QRadar, Alien Vault, or Microsoft Sentinel).

Familiarity with common security technologies including Firewalls, IDS/IPS, EDR/Antivirus software, and WAFs.

Fundamental understanding of computer networks, networking concepts, and protocols (e.g., TCP/IP, DNS, HTTP/S, SSH).

* Relevant certifications such as CompTIA Security+, Network+, or CySA+.

Knowledge of scripting languages (e.g., Python, Bash, or Power Shell) for automation.

Strong analytical and problem-solving skills, with the ability to work effectively both independently and within a team environment.