Security Operations Center Analyst L2

What We Are Looking For

• Have 2–5 years of experience in a SOC, MSSP, or cybersecurity operations environment.
• Have strong experience investigating and responding to incidents across SIEM and EDR platforms.
• Understand MITRE ATT&CK and Cyber Kill Chain attack frameworks.
• Have experience analyzing malware, phishing, lateral movement, privilege escalation, and advanced threats.
• Have strong knowledge of networking concepts, protocols, and traffic analysis.
• Perform advanced log analysis and correlate events across multiple security tools.
• Have experience with Microsoft Sentinel, QRadar, Splunk, or similar SIEM technologies.
• Make sound decisions under pressure while managing multiple security incidents.
• Communicate effectively and collaborate within a global team environment.

Preferred Skills and Certifications

• Familiarity with Azure, AWS, or GCP security monitoring is advantageous.
• Relevant cybersecurity certifications such as GCIH, GCIA, CEH, SC-200, or SIEM-specific certifications are beneficial.

About SecurityHQ