Overview:
We are seeking a proactive and detail-oriented SOC Analyst to join our Digital Security Group. In this role, you will be responsible for real-time monitoring, triaging, and responding to security alerts generated by our SIEM and other security monitoring tools. You’ll be a key player in protecting company's digital assets by analyzing threats, identifying risks, and escalating incidents where needed. 

---

Key Responsibilities:

• Continuously monitor security events in real time (“eyes-on-glass”).
• Triage and validate potential threats in alignment with defined processes and escalation paths.
• Analyze and enrich alerts using internal/external data sources to determine whether escalation to incident status is warranted.
• Correlate and investigate data across host-based logs, network traffic, and other telemetry to detect signs of intrusion.
• Review security event logs regularly, correlating activity against established threat use cases.
• Utilize playbooks to determine the nature of alerts (e.g., false positives, duplicates).
• Acknowledge and manage tickets in the ITSM system in line with service level agreements (SLAs).
• Document findings, communicate risks, and escalate alerts to the SOC Manager or incident response teams as appropriate.
• Assist in identifying and prioritizing incidents based on organizational impact and threat severity.
• Execute day-to-day monitoring tasks, maintain accurate documentation, and contribute to process improvements.

---

Qualifications:

• 2+ years of experience working in a Security Operations Center (SOC), with a focus on incident detection, response, and analysis.
• Proficiency in SIEM platforms such as Microsoft Sentinel or similar, including hands-on experience creating and executing queries.
• Familiarity with EDR/XDR technologies and endpoint protection platforms like Microsoft Defender.
• Exposure to cloud security tools such as CSPM/CWP, especially in Azure environments.
• Knowledge of Web Application Firewalls (WAF) and API security best practices.
• Understanding of the MITRE ATT&CK and SANS frameworks.
• Experience analyzing malware or conducting basic forensics is a strong asset.
• Industry certifications such as CISSP, CISM, CISA, CompTIA Security+/CySA+, GIAC are considered an asset.
• Strong communication skills and the ability to collaborate with cross-functional teams.
• Comfortable navigating and adhering to change management and IT governance processes.

This is a standard business hours role (9 AM to 5 PM), with the potential for after-hours, weekend, and on-call work based on business needs.

We’re an equal opportunity employer committed to increasing diversity and inclusion in today’s workforce. All qualified applicants will receive consideration for employment without regard to race, color, religion, gender, gender identity or expression, sexual orientation, national origin, genetics, disability, age, or veteran status. Minorities, women, LGBTQ candidates, and individuals with disabilities are encouraged to apply. If you require an accommodation, please review our accessibility policy and reach out to our accessibility officer with any questions.