Security Operations Center Analyst

About the role

We are seeking a Security Operations Center (SOC) Analyst to join our growing cybersecurity service line. You will work closely with the SOC team and client stakeholders to monitor, investigate, and respond to cyber threats across diverse environments.

Key responsibilities

• Monitor client environments using security monitoring platforms, detection tools, and telemetry sources.
• Review, triage, and prioritize alerts based on severity, business impact, and likelihood of malicious activity.
• Investigate suspicious network, email, cloud, identity, endpoint, or SaaS activity.
• Escalate validated incidents following SOC procedures and incident‑response playbooks.
• Support containment and remediation by providing timely analysis and practical recommendations.
• Conduct in‑depth investigations of lateral movement, credential misuse, phishing, malware, insider activity, and data exfiltration.
• Document incident timelines, root causes, affected assets, and recommended actions.
• Maintain and tune monitoring use cases, reduce false positives, and integrate SIEM, EDR/XDR, and ticketing systems.
• Deliver reporting on threat trends and operational metrics.

Required profile

• Hands‑on experience in security monitoring, incident triage, and threat investigation.
• Ability to work collaboratively with internal and client technical teams during active incidents.
• Strong analytical skills to correlate alerts with logs, network traffic, and endpoint telemetry.

Required skills

• SIEM platforms
• EDR/XDR solutions
• Network traffic analysis
• Log analysis
• Incident response
• Threat hunting

What we offer

• Opportunity to shape a new cybersecurity service line.
• Collaboration with a global team of over 3,000 professionals.
• Access to cutting‑edge security tools and technologies.