Cybersecurity Operations Analyst – SOC

About the role

As a Cybersecurity Operations Analyst in the Security Operations Center, you will monitor, detect and respond to security incidents across the organization’s IT environment. You will help maintain a strong security posture by analysing alerts, investigating events and providing actionable recommendations.

Key responsibilities

• Monitor security alerts, logs and event data from SIEM, IDS, firewalls and endpoint tools to identify potential incidents.
• Investigate, triage and classify security events, escalating critical issues to response teams.
• Conduct initial incident response, root‑cause analysis and coordinate containment and remediation actions.
• Stay current on emerging threats, analyse threat‑intel feeds and apply findings to improve detection capabilities.
• Prepare detailed incident reports, maintain documentation and contribute to runbooks and knowledge bases.

Required profile

• 1–2+ years of experience working in a security operations center or similar environment.
• College degree preferred and at least one relevant security certification.
• Ability to work independently with minimal guidance and handle internal cybersecurity tickets.

Required skills

• Hands‑on experience with SIEM platforms and security information monitoring.
• Familiarity with endpoint detection and response (EDR) tools and firewalls.
• Knowledge of the O365 ecosystem and ticketing/case‑management systems.
• Understanding of threat intelligence sources and indicator of compromise analysis.