Senior SOC Analyst

About the job

What You Will Do Triage and investigate Tier 2 escalated security alerts across SIEM platforms such as Splunk, Microsoft Sentinel, or Elastic Security to determine scope, impact, and root cause. Write, tune, and maintain custom detection rules, correlation searches, and alert logic to reduce false positives and surface emerging threats. Perform proactive threat hunting using frameworks like MITRE ATT&CK to identify adversary techniques and unknown threats. Orchestrate and automate incident response workflows using SOAR platforms such as Palo Alto XSOAR, Splunk SOAR, or Microsoft Sentinel Playbooks. Conduct malware analysis, log forensics, and endpoint investigations using EDR tools such as CrowdStrike Falcon, SentinelOne, or Microsoft Defender for Endpoint. Produce detailed incident reports and post-mortem analyses for client security leadership, recommending remediation steps and detection improvements. Collaborate during shift handoffs and real-time incident escalations with international SOC teams. What We’re Looking For 4+ years of SOC analyst or security operations experience, with at least 2 years at Tier 2 or above. Hands-on proficiency with at least one major SIEM platform (Splunk, Microsoft Sentinel, Elastic Security, or equivalent) including SPL, KQL, or similar query languages. Experience with EDR platforms such as CrowdStrike Falcon, SentinelOne, or Carbon Black for endpoint investigation and response. Working knowledge of SOAR tools and automated playbook development for incident response. Relevant certifications such as CompTIA CySA+, GCIA, GCIH, or SC-200 are a strong plus. Flawless English communication skills to deliver incident briefs and reports directly to security leadership.