Security Operations Analyst

Position Summary:

The Security Operations Analyst is responsible for monitoring, analyzing, and responding to security events and incidents across the organization. This role plays a key part in protecting enterprise assets by identifying threats, investigating suspicious activity, and executing response actions in collaboration with SOC, IT, and engineering teams. The ideal candidate is analytical, detail-oriented, and passionate about cybersecurity operations.

Key Responsibilities:

Security Monitoring & Alert Triage

• Monitor SIEM, EDR, NDR, IAM, and cloud security platforms for suspicious activity.
• Triage alerts to determine severity, scope, and potential impact.
• Correlate events across tools to identify indicators of compromise (IOCs).
• Document findings and escalate incidents as required.

Incident Response

• Execute initial containment and remediation actions based on runbooks.
• Gather evidence: logs, network traffic, system data, threat intel.
• Assist in root cause analysis and post-incident reviews.
• Coordinate with Security Engineers, IT, and application teams during incidents.

Threat Detection & Hunting

• Assist in tuning detection rules to reduce false positives.
• Conduct periodic threat hunts based on emerging threats or MITRE ATT&CK frameworks.
• Identify gaps in visibility and recommend improvements.

Threat Intelligence

• Review threat intel feeds and correlate with internal telemetry.
• Update IOCs, detection signatures, and enrichment sources.
• Track trends, threat actor tactics, and industry-specific risks.

Security Tools & Platform Operations

• Support maintenance of SIEM, SOAR, EDR, and cloud security tools.
• Validate log ingestion and data quality across security platforms.
• Collaborate on automation opportunities to reduce analyst workload.

Documentation & Reporting

• Maintain accurate incident tickets, timelines, and reporting metrics.
• Update runbooks, playbooks, and knowledge base articles.
• Prepare summaries for leadership on major incidents and trends.
• Weekly and Monthly reports