SOC Analyst- L2

Job Summary

We are looking for an experienced SOC Analyst L2 to investigate escalated security incidents, perform threat hunting, conduct root-cause analysis, and develop detection use cases. The candidate should have strong hands-on experience with SIEM platforms, incident response, log analysis, and security monitoring.

Key Responsibilities

· Investigate and resolve incidents escalated by L1 analysts.

· Perform threat hunting across endpoint, network, identity, and cloud logs.

· Analyze indicators of compromise (IOCs), suspicious processes, malicious IPs, and unusual authentication activity.

· Conduct incident scoping, root-cause analysis, and impact assessment.

· Develop, tune, and test SIEM detection rules and correlation searches.

· Create new detection use cases to address emerging threats and monitoring gaps.

· Reduce false positives and improve alert quality.

· Coordinate with infrastructure, network, endpoint, and identity teams during investigations.

· Maintain incident reports, technical documentation, and response timelines.

· Support security frameworks, compliance requirements, and SOC process improvements.

· Mentor L1 analysts and improve triage and escalation procedures.

Must-Have Skills

· Strong SIEM experience, preferably Splunk or another enterprise SIEM.

· Threat hunting and advanced log analysis.

· Incident investigation, containment coordination, and response.

· Detection engineering and use-case development.

· Knowledge of endpoint, network, identity, and cloud security events.

· Incident reporting, root-cause analysis, and stakeholder communication.

Preferred Certifications

CISSP, CompTIA Security+, or other relevant cybersecurity certifications. Confirm which credentials are mandatory versus preferred.