Back
Remote role, mid-level SOC title, and broad common toolset create high applicant competition.
Core SOC and SIEM skills transfer across industries but compliance specifics create moderate domain bias.
Many mandatory technologies and explicit 2–4 years requirement make shortlisting highly strict.
Login to See Your Match Score
Create a free account or log in to unlock your CV match score across:
Perform triage and analysis of security incidents identified by SOC analysts to reduce false positives and enhance detection rules.
Coordinate escalation of security issues to relevant business units and collaborate on vulnerability remediation efforts.
Monitor advanced security tools and threat intelligence, assist in incident response procedures, and support SOC management with reporting and tool implementation.
2-4 years experience in Security Operation Center (SOC) or Cyber Security within enterprise environments.
Mandatory experience with Azure, EDR/XDR (Crowdstrike, Windows Defender), SOAR, SIEM tools (Splunk, Rapid7, ArcSight, McAfee Nitro), Palo Alto, Cisco, and at least one of IDS/IPS, database activity monitoring, MFA, web content filtering, encryption, DLP, or change detection.
Proficient with Windows and Linux OS hardening processes and scripting in Bash, PowerShell, or Python.
Willingness to work in rotational 24/7 shifts.
Experienced in monitoring and optimizing unified SIEM environments and incident response workflows in enterprise SOC settings.
Knowledgeable about network protocols, common cyber threats (DoS/DDoS, SQL injection, XSS), and compliance standards like PCI, SOX, HIPAA.
Capable of collaborating across business units and supporting SOC manager in dashboarding, reporting, and security tool deployment.