Back
Remote, mid-level SOC role with broad tool requirements increases candidate competition.
Core cybersecurity skills transfer across industries, but regulatory and SIEM/EDR specifics moderately increase fit sensitivity.
Explicit 2-4 years plus many mandatory SIEM/EDR/cloud tool proficiencies make shortlisting stringent.
Login to See Your Match Score
Create a free account or log in to unlock your CV match score across:
Triage and analyze security incidents detected by SOC analysts to ensure timely response and escalation.
Optimize security monitoring tools and rule sets to reduce false positives and automate reporting within SIEM environments.
Collaborate across business units to prioritize vulnerability remediation and maintain security incident response procedures.
2-4 years experience in Security Operations Center (SOC), Cyber Security, or Information Security in enterprise environments.
Mandatory experience with Azure, EDR/XDR solutions (e.g., Crowdstrike, Windows Defender), SOAR, SIEM tools like Splunk or Rapid7, and network/security technologies such as Palo Alto, Cisco, IDS/IPS, DLP, and encryption.
Working knowledge of TCP/IP, common protocols, security threats (DoS/DDoS, SQL injection, XSS), and compliance standards including PCI, SOX, and HIPAA.
Willingness to work in rotational 24/7 shift schedule.
Experienced in hands-on SOC operations with strong background in SIEM tool tuning and incident analysis.
Comfortable working collaboratively with multiple teams across business units to drive vulnerability management and security improvements.
Able to handle complex security toolsets and scripting (Bash, PowerShell, Python) for incident response automation and enhancements.