Security Operations Center Analyst

Role Overview

Soc Analyst

Security Monitoring

• Monitor SIEM dashboards (e.g.,

Microsoft Sentinel

• ) and security alerts in real time
• Analyze events from security platforms such as

Microsoft Defender

• Detect suspicious activity, anomalies, and policy violations

Incident Triage & Response

• Perform initial investigation and classification of alerts (false positives vs. true positives)
• Collect and analyze logs, event data, reputational intelligence, and indicators of compromise (IOCs)
• Escalate confirmed or high-severity incidents to L2/L3 teams with complete documentation
• Execute predefined response actions such as endpoint isolation, password resets, and IP blocking

Threat Analysis

• Validate IOC hits against threat intelligence sources
• Analyze phishing attempts, malware infections, malicious URLs/attachments, credential harvesting, and unauthorized access
• Identify alert patterns and trends to support early threat detection

Documentation & Reporting

• Create detailed incident tickets and investigation notes
• Conduct root cause analysis and document incident reports with remediation recommendations
• Maintain accurate incident timelines and status updates
• Produce reports on recurring or emerging security issues

Collaboration

• Work closely with the Security Operations and internal IT teams
• Communicate with users to validate suspicious activities and login events
• Follow established SOPs and contribute to process and control improvements

Security Awareness & Training

• Conduct security awareness training (e.g., phishing prevention, password hygiene)
• Develop and share educational materials on emerging cyber threats

Threat Intelligence & Research

• Stay current with evolving threats, vulnerabilities, and attack techniques
• Analyze threat intelligence feeds and reports to enhance the organization’s security posture

Required Qualifications

• Bachelor’s degree in Engineering, Computer Science, or a related field
• **5–7 years**
• of experience in SOC operations
• **3+ years**
• of hands-on experience in SOC, Blue Team, or Security Engineering roles
• Strong experience with

Microsoft Sentinel

Microsoft Defender

Technical Skills

• Strong understanding of

Tcp And Ip

• , Windows and Linux internals
• Experience with
• AWS and Azure security controls
• Scripting and automation skills (Python, PowerShell, or Bash)
• Familiarity with

Mitre Att&Ck

Certifications (Nice To Have)

• CompTIA Security+
• Microsoft SC-200
• CEH
• CCNA or CCNP (Security)

Soft Skills

• Strong analytical and investigative mindset
• Excellent written and verbal communication skills, including executive reporting
• Ability to multitask and perform effectively in high-pressure environments
• Nice to Have
• Experience working on

Zero Trust

• security architecture initiatives
• Knowledge of

Uae Pdpl

Gdpr