Security Operations Analyst (Tier 2)
Core
Tier 2 Security Operations Analyst investigating medium/high-severity alerts, phishing, and malware for a gaming company's SOC.
Role type
Tier 2 SOC analyst (incident response & triage)
Builds
Defensible conclusions on security incidents, detection tuning, and incident response support
Domain
Cybersecurity / Security Operations Center (SOC)
Required skills
MSSP alert ownership, IOC identification, endpoint/identity/network/cloud forensics, containment & remediation, SIEM/EDR/SOAR querying, incident response process, phishing/malware investigation, MITRE ATT&CK mapping
Preferred skills
Detection tuning, threat hunting, cloud security monitoring (AWS/Azure/GCP), scripting (Python/PowerShell), SOAR/automation
Technologies
CrowdStrike (CQL), SIEM, EDR, SOAR, Windows, Linux, Active Directory/Entra ID
Responsibilities
Own MSSP customer concerns and medium/high-severity alerts from start to finish; Review MSSP triage quality and provide feedback; Triage phishing, malware, and credential-compromise incidents; Execute containment and remediation per playbooks; Raise issues to senior specialists with full evidence; Build and run queries across SIEM, EDR, and SOAR platforms; Identify detection gaps and propose tuning; Document cases to high standards; Support specialist-led threat hunts and incident response; Contribute to playbook and knowledge-base improvements; Participate in 24x7 rotating shift roster
Seniority
Mid-level, hands-on IC
