SOC L3 Specialist

Senior Cyber Security Specialist (SOC Analyst L3)

Key Responsibilities:

• Conduct

  proactive threat hunting

  across network and endpoint environments using SIEM, EDR, and threat intelligence platforms.
• Identify and analyze

  Indicators of Compromise (IOCs)

  and adversary

  Tactics, Techniques, and Procedures (TTPs)

  .
• Perform

  incident response activities

  , including triage, containment, investigation, remediation, and recovery.
• Execute

  forensic analysis

  on compromised Windows and Linux systems to determine root cause and impact.
• Coordinate with SOC, IT, and business teams during high-severity security events and ensure effective communication.
  
• Develop and fine-tune

  detection rules, correlation logic, and incident response playbooks

  .
• Leverage frameworks such as

  MITRE ATT&CK

  and integrate

  threat intelligence

  to enhance detection and defense capabilities.
• Generate detailed

  incident reports, RCA documentation

  , and post-incident recommendations.
• Act as a subject matter expert (SME) for security operations and mentor junior analysts.
  

Required Skills & Qualifications:

• 4 - 6 years of hands-on experience in

  SOC operations

  ,

  threat hunting

  , and

  incident response

  .
• Proven ability to work independently and handle

  client interactions

  with professionalism and confidence.
• Strong knowledge of

  networking concepts

  ,

  Windows OS

  , and

  Linux OS

  internals.
• Proficiency in using

  SIEM tools

  (e.g., Splunk, QRadar, Sentinel) and

  EDR solutions

  (e.g., CrowdStrike, Carbon Black, Defender).
• Deep understanding of

  cyberattack lifecycles

  , threat vectors, and advanced persistence mechanisms.
• Solid grasp of

  MITRE ATT&CK

  ,

  cyber kill chain

  , and threat modeling methodologies.
• Experience in forensic tools and techniques for memory, disk, and network forensics.
  
• Excellent

  analytical

  ,

  problem-solving

  , and

  communication skills

  (both verbal and written).

Certifications:

• Mandatory:

  CEH, E|CIH, or equivalent

• Preferred:

  GCFA, CHFI, GCIH, or other advanced cybersecurity certification