Description

As a SOC Analyst you'll monitor, triage, and respond to security events, hunt for threats, and help strengthen the organization's security posture.

Responsibilities

• Monitor SIEM alerts and network traffic for security events
• Triage, investigate, and escalate incidents per playbooks
• Perform threat hunting and analyze indicators of compromise
• Document incidents and contribute to post-incident reviews
• Tune detection rules to reduce false positives

Requirements

• 3+ years in a SOC or incident-response role
• Hands-on with SIEM tools (Splunk, Sentinel, or similar)
• Knowledge of NIST 800-53, MITRE ATT&CK, and IR processes
• Active Secret clearance required
• Security+, CySA+, or GCIH certification preferred

Key Skills

Education

Any Graduate