SOC Analyst

This is a remote position.

• Monitor, investigate, and respond to security incidents and alerts
  
• Perform incident triage, containment, eradication, recovery, and reporting
  
• Develop, tune, and maintain Splunk dashboards, alerts, correlation rules, and detection content
  
• Conduct threat hunting and analyse threat intelligence to identify emerging risks
  
• Support and improve incident response playbooks, runbooks, and SOC processes
  
• Produce incident report, metrics and security recommendations
  
• Collaborate with internal teams and external stakeholders during investigations
  
• The senior analyst will provide technical leadership, mentor analysts, and lead major incident response activities
  

Requirements

• Strong experience in SOC operations, incident response and threat detection
  
• Hands-on- expertise with Splunk Enterprise / Cloud, including SPL and security monitoring
  
• Knowledge of network, endpoint, cloud and security technologies
  
• Familiarity with MITRE ATT&CK, NIST incident response frameworks and threat hunting methodologies
  
• Experience with EDR, IDS/IPS firewalls
  
• The senior analyst will have proven experience leading investigations and mentoring security analysts
  

• Splunk certifications
  
• GIAC certifications (GCIH, GCIR, GCFA, GMON) or equivalent
  
• Experience with SOA, Python, Powershell
  

Benefits