Security Operations Center Analyst
Core
Operate and enhance the Security Operations Center (SOC) by managing threat detection, incident response, digital forensics, and security automation across cloud, endpoint, and identity environments.
Role type
Mid-level Security Operations Center (SOC) Analyst
Builds
SOC capabilities, detection rules, playbooks, dashboards, and automated response workflows
Domain
Cybersecurity, Cloud Security, Threat Intelligence
Deliverable
production ML models | product features | dashboards & analysis | client delivery | infrastructure
Required skills
Threat detection, incident response, threat hunting, digital forensics, SIEM/SOAR administration, log correlation, security automation scripting, cloud security monitoring, identity threat investigation, vulnerability management, technical reporting
Preferred skills
AI/LLM security workflows, MITRE ATLAS/OWASP Top 10 for LLMs, OSCE/CRTP/SC-200 certifications
Technologies
AWS (CloudTrail, GuardDuty, Security Hub, IAM, VPC Flow Logs, CloudWatch, Config), SIEM, SOAR, EDR, Google Workspace, Python, PowerShell, Bash, REST APIs
Responsibilities
Monitor, triage, and investigate security events across AWS, endpoint, and identity platforms; Analyze threat intelligence feeds and MITRE ATT&CK TTPs to validate detections; Correlate telemetry from endpoints, networks, cloud, and identity platforms; Design and optimize SIEM/SOAR detection rules, playbooks, and dashboards; Perform proactive threat hunting and endpoint/cloud forensics; Lead end-to-end incident response activities including containment, eradication, and RCA; Monitor and recommend improvements for AWS security services; Investigate identity-related threats using authentication and audit logs; Administer and integrate security technologies; Develop security automation using Python, PowerShell, and APIs; Support vulnerability management and remediation; Prepare incident reports and executive updates; Collaborate with Infrastructure, Cloud, and Engineering teams; Evaluate AI-assisted security workflows; Assess and enhance SOC architecture and maturity.
Seniority
Mid-level, hands-on IC
