SOC Threat Specialist

About the role

The SOC Threat Specialist protects the organization’s IT and OT environments by detecting, investigating, and proactively hunting cyber threats. You will bridge threat intelligence with operational detection to turn raw data into actionable security measures.

Key responsibilities

• Perform proactive threat hunting across IT and OT networks using intelligence from Threat Analysts.
• Analyze and correlate security incidents to uncover attacker behavior, techniques, and campaign patterns.
• Translate Indicators of Compromise (IOCs), TTPs, and adversary trends into detection content for SOC Engineers.
• Conduct deep‑dive investigations on high‑severity alerts and produce technical briefing reports.
• Support incident response teams during containment and eradication phases.
• Collaborate with SOC Engineers to refine SIEM use cases, detection rules, and SOAR playbooks.
• Perform malware reverse engineering, behavioral analysis, and create YARA rules and IOCs.
• Develop and maintain threat profiles for key adversaries targeting IT and OT.

Required profile

• Bachelor’s degree in information security, computer science, or engineering.
• Professional certifications such as GCTI, GCIA, GCIH, or GREM.
• At least 10 years of information security experience, including cyber threat analysis, hunting, and incident investigation in IT and OT environments.
• Strong understanding of network protocols, malware behavior, and MITRE ATT&CK framework.

Required skills

• SIEM and SOAR platforms
• Threat intelligence tools and advanced log analysis
• Malware reverse engineering (Ghidra, IDA Pro, x64dbg)
• IOC extraction and YARA rule creation
• Threat hunting methodologies
• MITRE ATT&CK mapping