Senior SOC Analyst L3 - Threat Hunting & Incident Investigation

About the role

An experienced Level 3 Senior Analyst for a Security Operations Centre (SOC) is sought to lead advanced security monitoring, threat hunting, incident investigation and response. The role suits candidates with strong expertise in SIEM, EDR, Cyber Threat Intelligence (CTI), malware analysis and incident management, preferably in a major bank, large corporation or MSSP.

Key responsibilities

• Analyse IDS alerts, network traffic, system logs and endpoint activity to identify and investigate threats.
• Validate, investigate and prioritise alerts from SIEM, EDR and CTI platforms.
• Conduct proactive threat hunting with advanced EDR tools.
• Lead complex incident investigations, including host triage, malware analysis, remote system analysis and root cause identification.
• Coordinate incident response, oversee remediation and track incidents to resolution.
• Evaluate SIEM, CTI and EDR vendors to improve alert accuracy and reduce false positives.
• Prepare incident reports, investigation findings and management notifications.
• Collaborate with security engineering teams to tune security tools and devices.
• Assess SOC capabilities, review procedures and protocols, and mentor junior analysts.

Required profile

• Bachelor's degree in Computer Science, Computer Engineering, Information Technology or a related field.
• Minimum 6 years of experience in a Level 3 SOC Analyst or equivalent senior security operations role.
• Experience in a major bank, large corporation or MSSP.
• Mandatory certification: CISSP, CISM or CISA.
• Siem and vendor-specific certifications are an added advantage.

Required skills

• Hands-on experience with SIEM, EDR, IDS/IPS and CTI platforms.
• Advanced threat hunting, malware analysis, incident response and endpoint forensics.
• Knowledge of threat intelligence, vulnerability management and attack methodologies.