SOC Analyst Level 2 – Security Operations Center

About the role

As a Security Operations Center (SOC) Analyst Level 2, you will join a 24/7 SOC team that protects a diverse set of customers. You will lead investigations of complex security incidents, work closely with Level 1 analysts, incident responders and security engineers, and help improve detection capabilities in a fast‑paced MSSP environment.

Key responsibilities

• Perform in‑depth investigations of incidents escalated from SOC Level 1.
• Analyze events across SIEM, EDR, network, endpoint and cloud security tools.
• Identify attack vectors, determine root cause and assess impact.
• Lead containment, mitigation and remediation together with internal and customer teams.
• Develop and refine detection rules, use cases, playbooks and monitoring capabilities.
• Participate in proactive threat hunting and continuous security improvement initiatives.
• Provide technical guidance and mentorship to junior analysts.
• Produce detailed incident reports, root‑cause analyses and customer‑facing communications.
• Support compliance, audit and post‑incident review activities.
• Assist with administration and optimisation of SIEM and EDR platforms.

Required profile

• 2–5 years of experience in a SOC, MSSP or cybersecurity operations environment.
• Strong background in investigating and responding to security incidents using SIEM and EDR platforms.
• Solid understanding of attack frameworks and threat‑actor tactics.
• Ability to work rotating shifts, including weekends and holidays.

Required skills

• SIEM technologies (e.g., log collection, correlation, alerting).
• Endpoint Detection and Response (EDR) tools.
• Network and endpoint security analysis.
• Cloud security monitoring.
• Malware and phishing investigation.
• Threat hunting techniques.
• Detection rule development and SOC playbook creation.
• SIEM and EDR platform administration.