Security Operations Center Analyst

L2 SOC Analyst – Job Description

Role Summary

The L2 SOC Analyst handles investigation and response to security incidents escalated from L1 analysts, ensuring timely resolution of threats.

Key Responsibilities

• Investigate and analyze security alerts and incidents
• Perform incident response (containment, eradication, recovery)
• Monitor logs using SIEM tools like Splunk, IBM QRadar, or Microsoft Sentinel
• Correlate events and identify suspicious activities
• Escalate critical issues to L3 or SOC Manager
• Document incidents and prepare reports
• Assist in improving detection rules and reducing false positives

Requirements

• 7–10 years of SOC or cybersecurity experience
• Knowledge of networking (TCP/IP, DNS, HTTP)
• Familiarity with Windows/Linux logs
• Basic understanding of MITRE ATT&CK framework
• Experience with SIEM and endpoint security tools