L3 SOC Analyst
Core
Lead day-to-day operations of the Cyber Defense Center (CDC), acting as the primary interface with the MSSP and senior escalation point for complex investigations.
Role type
Senior SOC Analyst (L3)
Builds
SOC 24/7 monitoring, incident response, and threat hunting activities
Domain
Cybersecurity / Security Operations
Required skills
SIEM, SOAR, EDR, IDS/IPS, DLP, WAF, MITRE ATT&CK, Cyber Kill Chain, vendor management, threat hunting, incident response
Preferred skills
EU cybersecurity regulations (NIS2), CISM, GCIA, GCIH, CISSP
Technologies
SIEM, SOAR, EDR, IDS, IPS, DLP, WAF
Responsibilities
Act as single point of contact for MSSP and manage vendor performance; Serve as L3 escalation point for complex alerts and investigations; Coordinate incident response across SOC tiers and handover to CIRT; Own SIEM/SOAR detection lifecycle including log onboarding and rule tuning; Define and coordinate threat hunting activities; Develop monthly KPI dashboards and reporting; Work with engineering to increase log coverage and visibility; Serve as rotational Duty Operational Manager for 24/7/365 on-call support.
Seniority
Senior, hands-on IC with team/vendor coordination