Security Operations Center (SOC) Analyst
Core
Monitor, triage, and respond to cyber threats across Mac, Linux, and Windows environments using EDR and SIEM tools.
Role type
SOC Analyst (Incident Response)
Builds
Detections and threat monitoring capabilities
Domain
Cybersecurity / Endpoint Security
Required skills
CrowdStrike EDR, CQL query language, SIEM analysis, incident response, threat hunting, Mac/Linux OS expertise, malware analysis, phishing detection, OSINT tools
Preferred skills
Python scripting, Crowdstrike Fusion SOAR, cloud security (AWS/GCP/Azure), forensic analysis
Technologies
CrowdStrike, CQL, SIEM, VirusTotal, Python, SOAR, AWS, GCP, Azure
Responsibilities
Monitor and triage security alerts, build and refine detections, conduct threat hunting, investigate and respond to incidents, document findings and remediation, collaborate on security controls, participate in 24x7x365 on-call rotation
Seniority
Mid-Senior, hands-on IC