General Overview of the Job:

We are looking for a skilled Security Operations Center (SOC) Analyst with experience in cyber threat intelligence (CTI), threat hunting, analytic rule creation, and incident response. This role will be responsible for day-to-day security operations, proactive threat detection, and threat intelligence analysis to help strengthen the organization’s overall security posture. 

Job Duties and Responsibilities:

• Perform day-to-day monitoring, investigation, triage, containment, and handling of security incidents and alerts. 
• Conduct proactive threat hunting activities to identify suspicious, anomalous, or malicious activities across the environment. 
•  Create, tune, and maintain analytic/detection rules within SIEM and security monitoring platforms. 
• Analyze cyber threat intelligence feeds, indicators of compromise (IoCs), emerging threats, and attacker behaviors to improve detection and response capabilities. 
• Perform threat actor profiling, TTP (Tactics, Techniques, and Procedures) analysis, and mapping using frameworks such as MITRE ATT&CK. 
• Manage IoC lifecycle activities including validation, enrichment, tracking, tuning, and operationalization. 
• Utilize threat intelligence platforms such as Recorded Future or similar CTI solutions for threat research and analysis. 
• Investigate phishing, malware, endpoint, identity, cloud, and network-related security incidents. 
• Correlate logs, telemetry, and intelligence data to identify attack patterns and security gaps. 
• Present findings, discuss risks, and provide security recommendations to technical teams, management, and stakeholders. 
• Coordinate with internal teams during incident response and remediation activities. 
• Continuously improve SOC processes, use cases, playbooks, and detection coverage.

Minimum Qualifications:

• At least 3–5 years of experience in SOC operations, incident response, threat hunting, or cyber threat intelligence. 
• Hands-on experience with SIEM platforms such as Microsoft Sentinel 
• Experience creating and tuning analytic rules, detections, correlation logic, and alerting mechanisms. 

Strong knowledge of cyber threat intelligence concepts including:  

• Threat actor profiling 
• TTP analysis 
• IOC management 
• Threat landscape monitoring 
• MITRE ATT&CK mapping 
• Experience using CTI platforms such as: Recorded Future 
• Experience investigating phishing, malware, account compromise, insider threats, and advanced attack activities. 
• Knowledge of KQL, SPL, or similar query languages. 
• Strong analytical, investigative, documentation, and communication skills. 
• Ability to present technical findings clearly to stakeholders and management.