SOC Analyst - Team Leader L1/L2

We are seeking a skilled SOC Analyst - Team Leader to oversee and enhance the operations of our Security Operations Center. The successful candidate will be responsible for leading a team of Level 1 and Level 2 analysts, ensuring effective monitoring, detection, and response to security incidents.

Key Responsibilities:

• Use forensic, incident response, and process expertise to respond to and investigate system, service, or network attacks and breaches alone and as part of a team.

• Lead other Security Engineers to plan and build proactive defenses, automation, and event detection into the SIEM/SOC platform(s).

• Monitor security event logs in the SIEM/SOC platform for suspicious activity.

• Understand the overall processes and procedures of the SIEM/SOC and their relevance to the managed client.

• Escalate complex security threats to senior analysts (L3).

• Support forensic analysis and threat investigation.

• Collaborate with IT and security teams to mitigate and contain threats.

• Conduct threat hunting activities and identify vulnerabilities.

• Help maintain security dashboards and reporting.

• Participate in security awareness training and documentation.

Qualifications:

Essential Requirements:

• Bachelor's degree in computer science, information systems, or a related field.
• At least 2 years of professional experience in managing a SOC team.
• Strong knowledge of SIEM/SOC platforms like FortiSIEM, Splunk, QRadar, USM Anywhere (AlienVault), or similar.
• Strong analytical and troubleshooting skills.
• Proficiency in English is a must.

The candidate should be able to demonstrate:

• Familiarity with network security, firewalls, and endpoint protection.
• Understanding of common cyber threats and attack techniques.
• Communication skills, both written and verbal, and the ability to collaborate effectively with team members.
• Familiarity with scripting languages (Python, PowerShell, or Bash) are a plus.
• Certifications such as GCIA, GCIH, Splunk Certified Admin, or CySA+ are a plus.

The ideal candidate will demonstrate a proactive approach to security challenges and a commitment to continuous improvement in SOC operations.