SOC Analyst L2

Opportunity Information

The Role

The SOC Analyst L2 conducts deep-dive investigations into escalated security incidents, performs advanced incident response and threat hunting, and improves detection in the Security Operations Centre of the National Telecommunication and Information Security Board.

•Conduct deep-dive investigations into escalated security incidents to determine the full scope of an attack •Perform root cause analysis to understand how an adversary gained access and identify security gaps •Execute advanced incident response tasks including the containment, eradication, and recovery of systems •Proactively threat hunt within the network using behavioral analytics to find hidden or persistent threats •Analyze malware behavior in sandbox environments to identify Indicators of Compromise (IoCs) •Correlate data across multiple log sources (Firewalls, EDR, Cloud logs) to reconstruct attacker movement •Fine-tune SIEM correlation rules and alert thresholds to improve detection accuracy and reduce noise for Tier 1 •Coordinate with IT and infrastructure teams to apply specific security patches or configuration changes •Develop and update automated playbooks and standard operating procedures (SOPs) for the SOC team •Integrate external threat intelligence feeds to stay ahead of emerging attack patterns and zero-day exploits

Applicants General Eligibility & Requirements

Education, Experience and Skills Requirements