SOC Analyst L2/L3

Roles & Responsibilities

1. Monitor and analyze security events and alerts across platforms such as SIEM, EDR, and IDS/IPS.
2. Investigate potential security incidents and escalate based on defined incident response processes.
3. Correlate events from multiple sources to identify patterns, anomalies, and threats.
4. Perform advanced analysis of cyber threats including malware, phishing, and attack vectors.
5. Lead and participate in proactive threat hunting activities.
6. Administer SOC tools including SIEM, EDR, SOAR, and threat intelligence platforms.
7. Manage log integrations, data onboarding, and normalization across security tools.
8. Tune detection rules, correlation logic, and alert thresholds to reduce false positives.
9. Maintain system health, perform upgrades/patching, and troubleshoot SOC platform issues.
10. Develop and document SOPs, security use cases, and incident response playbooks.