SOC Analyst L2

Opportunity Information

The Role

The SOC Analyst L2 conducts deep-dive investigations into escalated security incidents, performs advanced incident response and threat hunting, and improves detection in the Security Operations Centre of the National Telecommunication and Information Security Board.

• Conduct deep-dive investigations into escalated security incidents to determine the full scope of an attack • Perform root cause analysis to understand how an adversary gained access and identify security gaps • Execute advanced incident response tasks including the containment, eradication, and recovery of systems • Proactively threat hunt within the network using behavioral analytics to find hidden or persistent threats • Analyze malware behavior in sandbox environments to identify Indicators of Compromise (IoCs) • Correlate data across multiple log sources (Firewalls, EDR, Cloud logs) to reconstruct attacker movement • Fine-tune SIEM correlation rules and alert thresholds to improve detection accuracy and reduce noise for Tier 1 • Coordinate with IT and infrastructure teams to apply specific security patches or configuration changes • Develop and update automated playbooks and standard operating procedures (SOPs) for the SOC team • Integrate external threat intelligence feeds to stay ahead of emerging attack patterns and zero-day exploits

Applicants General Eligibility & Requirements

Education, Experience and Skills Requirements