About the job

We are seeking an experienced and hands-on SOC Analyst with a strong background in Security Operations Center (SOC) functions, particularly in SIEM (Security Information and Event Management) and SOAR (Security Orchestration, Automation,

About the job

We are seeking an experienced and hands-on SOC Analyst with a strong background in Security Operations Center (SOC) functions, particularly in SIEM (Security Information and Event Management) and SOAR (Security Orchestration, Automation, and Response) platforms. The ideal candidate will be responsible for real-time incident detection, analysis, escalation, and response, while also contributing to the tuning and automation of SOC tools and processes.

• Key Responsibilities:Monitor, analyze, and respond to security events and incidents using SIEM and SOAR platforms.
• Create and fine-tune detection use cases to reduce false positives and improve threat detection.
• Onboard new assets, validate logging, and ensure complete and correct log ingestion.
• Perform log parsing and normalization for custom and standard log sources.
• Develop, maintain, and optimize playbooks and automated incident response workflows.
• Collaborate with IT and security teams to resolve incidents and improve threat posture.
• Maintain detailed and timely incident records, documentation, and reports.
• Work in a 24x7 shift rotation, including weekends and holidays.
• Take initiative to handle additional SOC responsibilities as assigned by management.
• Qualifications:3–5+ years of experience in a SOC environment.
• Proven experience with leading SIEM platforms (e.g., Splunk, QRadar, ArcSight, LogRhythm).
• Hands-on experience with SOAR solutions (e.g., Palo Alto Cortex XSOAR, IBM Resilient, Splunk SOAR).
• Strong understanding of security event types, threat detection techniques, and incident response.
• Experience in use case creation, log source onboarding, and parsing.
• Scripting knowledge (Python, PowerShell) is a plus for playbook development.
• Industry certifications such as GCIA, GCIH, CEH, or SOC Analyst certifications are desirable.