JOB PURPOSE

The SOC Analyst is responsible for supporting the organization’s cybersecurity operations by monitoring, detecting, and responding to security events and incidents. The role aims to protect critical systems and data by proactively identifying potential threats, conducting initial investigations, and escalating issues as needed. This position contributes to maintaining a strong security posture through continuous monitoring, analysis, and collaboration with internal teams, while also developing technical skills and expertise in a fast-evolving threat landscape. 

KEY RESPONSIBILITIES    

       i.          Monitor security alerts and events using SIEM platforms and other security tools

     ii.          Investigate and triage security incidents, performing initial analysis and escalation when required

    iii.          Respond to incidents in accordance with established playbooks and procedures

    iv.          Analyze logs from various sources (network, endpoints, cloud systems) to identify suspicious activity

      v.          Support threat detection efforts through correlation rules and use case development

    vi.          Assist in vulnerability management and remediation tracking

  vii.          Document incidents, investigations, and actions taken clearly and accurately

 viii.          Collaborate with IT, network, and security teams to resolve security issues

    ix.          Participate in continuous improvement initiatives within the SOC

      x.          Stay updated on emerging threats, vulnerabilities, and cybersecurity trends 

RESOURCE TO BE ALLOCATED

(Standard as allocated to employees within Job Level)

QUALIFICATIONS & EXPERIENCE

1.      Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, and related field or equivalent industry certifications.

2.      2–4 years in security operations, incident response, incident handling and security monitoring experience

3.      Hands-on experience with SIEM tools

4.      Familiarity with security concepts such as IDS/IPS, EDR/XDR, firewalls, and threat intelligence

5.      Basic understanding of networking concepts (TCP/IP, DNS, HTTP, VPNs)

6.      Exposure to operating systems (Windows, Linux) and log analysis 

 

COMPETENCIES

Technical Skills 

1.      Understanding of cloud security concepts (Azure, AWS, or GCP environments)

2.      Knowledge of cybersecurity frameworks such as MITRE ATT&CK, NIST, PCI and ISO, Good interpersonal, communication and analytical skills;

3.      Ability to learn job requirements and perform effectively in short time;

4.      Ability to work under pressure and during odd hours to meet tight deadlines

5.      Ability to work independently and efficiently with minimum supervision and within a collaborative team

6.      Customer Service oriented and ability to negotiate with customers tactfully.

7.      Required to travel abroad for overseas assignments;