Security Operations & Incident Response Analyst
Core
Investigate and respond to escalated cybersecurity incidents, analyze logs, and coordinate remediation with infrastructure and security teams.
Role type
SOC Tier 2 Security Operations & Incident Response Analyst
Builds
Incident response playbooks, investigation reports, and improved detection rules
Domain
Cybersecurity / Information Security
Required skills
SIEM analysis, EDR/XDR investigation, log analysis, incident triage, threat hunting, Windows environment analysis, Active Directory administration, incident documentation, remediation coordination
Preferred skills
SOC Tier 2 experience, external SOC provider experience, Microsoft Defender, Microsoft Sentinel, Trend AI, Microsoft 365, Entra ID
Technologies
SIEM, EDR, XDR, Microsoft Defender, Microsoft Sentinel, Trend AI, Microsoft 365, Entra ID, Windows, Active Directory
Responsibilities
Receive and analyze security alerts from external SOC, investigate incidents using logs and tools, classify false positives, coordinate containment and remediation, perform threat hunting, document incidents and track remediation
Seniority
Mid-level, hands-on IC
