Junior Cyber Defense SOC Analyst

Overview:

The Cyber Defense Security Operations Analyst is responsible for monitoring, detecting, investigating, and responding to cybersecurity threats and security incidents across the organization. This role serves as a key member of the Security Operations Center (SOC), leveraging threat intelligence, security monitoring tools, and incident response processes to protect enterprise systems and data. The analyst conducts event analysis, threat hunting, incident investigations, and documentation while collaborating with internal teams to strengthen the organization's overall security posture.

Responsibilities:

· Security Monitoring

o Monitor security events using SIEM and other event monitoring tools.

o Respond to SIEM alerts timely and efficiently.

o Conduct in-depth analysis of security logs and alerts to identify security incidents.

o Perform OSINT and stay informed about emerging threats, TTPs, and IOCs

o Respond to escalations timely and efficiently.

o Monitor and respond to incoming queries via phone, email, and tickets.

o Conduct E-Discovery

o Leverage threat intelligence to conduct threat hunts.

· Incident Response

o Identify, analyze, and contain cyber threats.

o Execute incident response procedures independently.

o Conduct Root Cause Analysis (RCA)

· Documentation and Reporting

o Document security event response and actions taken.

o Prepare reports and summaries on emerging threats, incidents, and investigations.

o Document and track incident timelines.

o Prepare threat hunting and IOC/APT tracking reports.

o Develop and maintain playbook, runbooks, SOPs.

· Communication and Collaboration

o Communicate escalations effectively to mid-tier and senior analysts.

o Collaborate with other cyber security team members and I.S. staff to resolve security incidents.

Required Skills and Qualifications:

· Bachelor’s degree in computer science, Information Technology, Cybersecurity, or related field (or equivalent experience)

· Offensive Security OSDA or equivalent certification

· Strong understanding of cybersecurity threats, attack vectors, and defense strategies.

· Analytical mindset with excellent problem-solving skills.

· Excellent communication skills and ability to work effectively within a team.

· Proficient knowledge of the Incident Response lifecycle

· Proficient knowledge of the Cyber Kill Chain and MITRE ATT&CK framework