SOC Analyst L1/L2
Core
SOC Analyst responsible for analyzing security logs, investigating incidents, and monitoring threats in a cybersecurity operations center.
Role type
SOC Analyst L1/L2
Builds
Security monitoring and incident response capabilities
Domain
Cybersecurity / Defense
Required skills
TCP/IP, DNS, HTTP/HTTPS, VPN, VLAN, Windows, Active Directory, MITRE ATT&CK, incident analysis, analytical thinking
Preferred skills
Wazuh, Microsoft Sentinel, Splunk, Elastic, FortiGate, Palo Alto, ESET, CrowdStrike
Responsibilities
Analyze Windows Event Logs, Sysmon, Firewall, VPN, and Active Directory; Analyze IOCs, suspicious activity, and potential attacks; Conduct primary incident investigation and determine criticality; Analyze phishing and malware; Participate in improving Detection Rules and SOC Use Cases; Prepare short technical reports and recommendations; Work with SIEM, EDR/XDR, and network logs
Seniority
Junior to Mid-level, hands-on IC
