Security Operations
SOC Analyst (Tier 1/2)
Monitor client environments around the clock, triage alerts and escalate real incidents with the context the response team needs.
Responsibilities
- Monitor SIEM and EDR alerts and investigate suspicious activity.
- Triage alerts, remove false positives and document findings.
- Escalate confirmed incidents with a clear timeline and impact.
- Contribute detection rules and tune noisy alerts.
Requirements
- Bachelor's degree in computer science, engineering or equivalent experience.
- Solid understanding of networking, Windows and Linux internals.
- Hands-on experience with at least one SIEM platform.
- Ability to work rotating shifts, including nights.
Preferred
- Security+, CySA+ or Blue Team certifications.
- Scripting in Python or PowerShell.