About this role
Job Summary We are seeking a technically strong SOC Analyst L3 to handle advanced threat hunting, complex incident investigations, detection strategy, and technical leadership. The candidate should be capable of leading investigations, developing advanced detection capabilities, guiding analysts, and driving continuous improvement across SOC operations.
Key Responsibilities · Lead advanced threat hunting and investigate sophisticated security incidents. · Perform detailed analysis of malware activity, lateral movement, privilege escalation, persistence, and potential data exfiltration. · Develop detection strategies, correlation logic, and advanced security use cases. · Review and improve existing detection rules, monitoring coverage, and incident response playbooks. · Lead incident investigations and coordinate response activities across security and IT teams. · Identify recurring threats and recommend preventive and corrective security controls. · Provide technical guidance, coaching, and mentoring to L1/L2 analysts. · Support SOC leadership with incident reporting, operational metrics, and process improvements. · Drive incident response readiness, documentation quality, and compliance alignment. · Contribute to security framework implementation and audit-related activities. · Support team leadership, prioritization, and operational decision-making as required.
Must-Have Skills · Advanced threat hunting and security event analysis. · Complex incident investigation and response coordination. · Detection strategy, engineering, and use-case development. · Strong SIEM and security platform knowledge. · Security frameworks, compliance awareness, and process improvement. · Technical leadership, analytical thinking, and communication skills.
Preferred Certifications · CISSP. · CompTIA Security+. · CCIE Security or a relevant CCIE security specialization. · Other relevant cybersecurity certifications.