SIEM / SOC Analyst

Role

Senior Security Analyst – SOC L3

Responsible for managing SIEM operations, investigating and responding to complex security incidents, and handling high-priority P1/P2 escalations. Perform threat hunting, root cause analysis, incident validation, containment, and remediation across endpoint, cloud, and identity environments.

Key responsibilities

• Manage SIEM platforms such as Splunk, Microsoft Sentinel, QRadar, and Sumo Logic.
• Investigate and remediate security alerts escalated by L2 SOC analysts.
• Handle high-severity incidents and coordinate with regional/global security teams.
• Perform root cause analysis and recommend remediation strategies.
• Develop and tune SIEM correlation rules, detection use cases, and alerting mechanisms.
• Conduct threat intelligence analysis and proactive threat hunting.
• Work with EDR/XDR tools such as CrowdStrike and Microsoft Defender.
• Improve SOC processes, SOPs, and security documentation.
• Provide technical guidance to L1/L2 analysts and support incident response activities.