Cybersecurity Analyst – SOC

Analyze escalated alerts in depth in SIEM and EDR/XDR, from triage to final verdict

Investigate Windows and Linux events and reconstruct attack paths using process trees and endpoint telemetry

Handle escalations: contain threats, isolate users and devices, and lead emergency communication

Write log search queries (e.g. LEQL, SPL, KQL) to investigate incidents

Integrate new systems and log sources into the SIEM and troubleshoot log collectors

Communicate with clients on false alarms, service requests, real incidents and onboarding

Enrich IOCs, run reputation checks, analyze phishing emails and map findings to MITRE ATT&CK

Support and mentor fellow analysts in the team

Contribute to threat hunting and detection logic

Willingness to participate in on-call duty and night shifts