SOC Tier 2 Analyst

- Lead investigations and remediation of complex security incidents, including malware infections, data breaches, and advanced persistent threats (APTs). - Utilize advanced SIEM tools, threat intelligence platforms, and other security technologies to analyze and correlate security alerts. - Take ownership of Tier 2-level escalations from Tier 1 analysts, guiding them through complex incident response procedures. - Proactively search for threats across the environment using behavioral analysis and threat intelligence data. - Analyze data from logs, network traffic, endpoint activities, and threat intelligence feeds to detect unusual or malicious activity. - Collaborate with other security teams to uncover hidden threats and vulnerabilities during threat hunting exercises. - Perform in-depth forensic analysis to determine the scope, impact, and root cause of security incidents, while collecting and preserving evidence in accordance with legal and regulatory requirements. - Provide guidance on incident containment, eradication, and recovery processes, working closely with IT teams to ensure proper remediation steps are taken. - Collaborate with threat intelligence teams to identify indicators of compromise (IOCs) and implement actions to block further attacks. - Share knowledge, techniques, and findings with Tier 1 and Tier 3 teams to enhance overall detection and response capabilities. - Stay informed about the latest cybersecurity trends, vulnerabilities, and attack techniques, contributing to threat intelligence enhancements. - Create detailed incident reports and documentation, including technical analysis and recommendations for mitigation, and present findings to management and external stakeholders as necessary.