Senior SOC Analyst – Cybersecurity Operations

About the role

We are looking for a Senior SOC Analyst to lead the monitoring, analysis, and response to cybersecurity threats across our environment. You will work closely with the security team to stay ahead of emerging attacks and ensure the protection of critical assets.

Key responsibilities

• Analyze and correlate security log data from heterogeneous security systems and devices.
• Provide Incident Response support for confirmed actionable incidents.
• Conduct threat and vulnerability analysis and deliver security advisory services.
• Recommend and enforce network security policies, standards, and procedures.
• Develop and improve incident response plans, workflows, and SOPs.
• Perform detailed analysis of network security appliances and monitor traffic for anomalies.
• Escalate security incidents according to defined policies.
• Analyze and respond to newly discovered software and hardware vulnerabilities.
• Investigate, document, and report security incidents and emerging threat trends.
• Collaborate and share intelligence with SOC team members and other departments.
• Execute additional cybersecurity or technical projects as assigned.
• Deliver cybersecurity awareness sessions and training to employees.

Required profile

• Bachelor’s degree in Computer Science, Information Security, or a related field.
• Preferred certifications: CCNA, CompTIA Security+, CEH or equivalent.
• Minimum 4+ years of experience in SOC, NOC, or cybersecurity operations.
• Professional proficiency in English and the local language.
• Strong analytical, problem‑solving, and communication skills.

Required skills

• TCP/IP networking and security protocols (SMTP, DNS, HTTP, etc.).
• Kali Linux and common security tools.
• SIEM platforms: Splunk, QRadar, Microsoft Sentinel, Elastic.
• IDS/IPS, EDR, and vulnerability scanners.
• Penetration testing concepts (black‑box, white‑box, grey‑box).
• Threat intelligence frameworks, MITRE ATT&CK.
• EDR/XDR tools: CrowdStrike, Microsoft Defender, SentinelOne.
• SOAR/automation capabilities.
• Cloud security fundamentals: AWS, Azure, GCP.
• Log analysis and scripting with Python and PowerShell.