SOC Analyst Tier 2 – Security Operations Center

About the role

The SOC Analyst Tier 2 is responsible for deep investigation and response to security incidents escalated from Tier 1. This mid‑level position strengthens the security posture of customers by performing advanced forensic analysis, threat hunting, and remediation.

Key responsibilities

• Conduct thorough investigations of escalated security incidents, analysing logs, network traffic and other data sources.
• Lead incident response activities, including containment, eradication and recovery, and produce detailed incident reports.
• Develop and execute proactive threat‑hunting strategies to identify advanced persistent threats.
• Perform digital forensic investigations on compromised systems to collect evidence and understand attack pathways.
• Collaborate with customer IT and security teams to improve security controls, policies and procedures.
• Mentor Tier 1 analysts, providing guidance and supporting continuous training initiatives.

Required profile

• Bachelor's degree in Computer Science, Information Security or a related field.
• 2‑5 years of experience in cybersecurity, incident response, or digital forensics.
• Proven ability to analyse complex security incidents and perform root‑cause analysis.
• Strong communication skills to work with cross‑functional teams and document findings.
• Relevant certifications such as CEH or CIH are a plus.

Required skills

• SIEM platforms
• IDS/IPS
• Firewalls
• Endpoint Detection and Response (EDR)
• Forensic software
• Windows, Linux and cloud environments
• Network administration
• System administration
• Python scripting
• PowerShell scripting
• Bash scripting
• Digital forensics techniques