SOC Analyst Mid

About the Role

We are recruiting for an unnamed retail-industry client. The Mid-Level SOC Analyst investigates escalated security alerts and incidents, leads incident response, develops and tunes detections, and mentors junior analysts.

Responsibilities

• Investigate escalated alerts and incidents, validating triage decisions and taking ownership of escalated alerts
• Perform in-depth investigations across endpoint, network, identity, email, and cloud telemetry to determine root cause, scope, and impact
• Lead containment, eradication, and recovery for medium- and high-severity incidents, coordinating with IT teams to execute remediation actions
• Develop new detection rules and correlation searches, tuning detections based on alert metrics and historical data
• Mentor Level 1 analysts, providing feedback on investigation practices and contributing to the creation of SOPs and playbooks
• Participate in the on-call rotation and contribute to tabletop exercises and drills