Cyber Security Analyst (SOC Level 2)

We are seeking a skilled and proactive SOC Analyst – Level 2 to join our Cyber Security team. The successful candidate will have practical experience working with SIEM and SOAR platforms, case management, security incident investigation, threat analysis, and incident response. This role requires a detail-oriented professional capable of handling complex security incidents and collaborating effectively with internal teams and external stakeholders to ensure timely resolution and continuous improvement of security operations.

Key Responsibilities

- Monitor, investigate, and respond to security incidents escalated from the SOC Level 1 team.
- Perform in-depth analysis of security events and alerts to identify potential threats.
- Conduct incident triage and root cause analysis, recommending appropriate containment, remediation, and recovery actions.
- Develop, optimize, and maintain SIEM/EDR use cases, correlation rules, dashboards, reports, and custom searches.
- Tune SIEM detection rules to reduce false positives and enhance threat detection capabilities.
- Investigate complex security incidents involving Windows, Linux, Active Directory, firewalls, VPNs, IDS/IPS, endpoint security, and network logs.
- Coordinate with internal technical teams, customers, and third-party vendors during security incident investigations.
- Lead technical escalations and ensure timely incident resolution within agreed service levels (SLAs).
- Prepare detailed incident reports, executive summaries, and periodic security reports for management and clients.
- Participate in customer meetings to discuss incident findings, security posture, and remediation recommendations.
- Maintain proper documentation, investigation evidence, and audit records to support compliance requirements.
- Assist in developing SOC playbooks, standard operating procedures (SOPs), and incident response workflows.
- Mentor SOC Level 1 analysts by providing technical guidance and sharing knowledge.
- Stay current with emerging cyber threats, attack techniques, threat intelligence, and industry best practices.

Required Qualifications

- Bachelor’s degree in Computer Science, Information Technology, Cyber Security, Software Engineering, or a related field.
- 2 to 3 years of experience working in a Security Operations Center (SOC) environment.
- Hands-on experience with IBM QRadar SIEM is mandatory.
- Proven expertise in enterprise security monitoring, incident response, and threat analysis.
- Strong skills in IBM QRadar SIEM, including log analysis, event correlation, and use case development.
- Solid understanding of Windows, Linux, Active Directory, firewall, VPN, IDS/IPS, endpoint security, and network log analysis.
- Basic scripting knowledge in Python or PowerShell is advantageous.

Preferred Qualifications and Certifications

- IBM Certified Associate Administrator – QRadar SIEM
- CompTIA Security+
- EC-Council Certified Ethical Hacker (CEH)
- GIAC Certified Incident Handler (GCIH)
- Microsoft SC-200: Security Operations Analyst

This role offers the opportunity to work in a dynamic cyber security environment, contributing to the protection of critical assets while developing your expertise and leadership within the SOC team.