SOC Analyst L2- Threat Hunter (m/f/d)

Overview

Responsibilities

• **Key Responsibilities*** Lead advanced investigations of security incidents and coordinate response efforts across teams.
• Perform deep-dive forensic analysis on compromised systems and networks.
• Conduct proactive threat hunting using MITRE ATT&CK and Cyber Kill Chain methodologies.
• Analyze large-scale logs and telemetry using KQL for pattern detection and anomaly identification.
• Oversee phishing investigations strategies.
• Provide guidance and mentorship to L1 SOC Analysts, ensuring knowledge transfer and skill development.
• Prepare executive-level reports on incident trends, threat intelligence, and SOC performance metrics.

Qualifications

• **Required Skills & Qualifications*** Education: Bachelor’s degree in Computer Science, Information Technology, or related field.
• Experience: 3-5 years in SOC operations or cybersecurity roles, with at least 2 years in advanced incident response.
• Strong expertise in Microsoft XDR, Microsoft Sentinel, and SIEM technologies.
• Advanced proficiency in KQL for complex queries and detection engineering.
• Hands-on experience with Linux/Unix OS administration and security.
• In-depth knowledge of incident handling lifecycle, digital forensics, and malware analysis.
• Strong understanding of MITRE ATT&CK, Cyber Kill Chain, and threat modeling frameworks.
• Experience in cloud security and securing Azure environments.
• Familiarity with automation and orchestration tools for SOC efficiency.
• Excellent analytical, problem-solving, and leadership skills.
• Strong communication skills for stakeholder reporting and cross-team collaboration.
• **Preferred Certifications*** Microsoft Certified: Security Operations Analyst Associate

• Microsoft Certified: Azure Security Engineer Associate

• CompTIA Security+, CySA+, or equivalent
• GIAC Certified Incident Handler (GCIH) or similar
• **Why Join Us?*** Opportunity to lead advanced security operations and shape SOC strategy.
• Work with cutting-edge technologies and proactive threat hunting initiatives.
• Collaborative environment with continuous learning and growth opportunities.