Soc Analyst Tier-2

Soc Analyst Tier-2

The role involves in-depth investigation of complex security alerts, management of cyber incidents (Incident Response), development of advanced monitoring rules, and collaboration with infrastructure and development teams to reduce the attack surface.

Responsibilities:

* Investigate incidents and provide escalation support for Tier 1 analysts.

* Conduct comprehensive investigations of complex security alerts, breach incidents, and suspected malicious activity (Malware, Phishing, Unauthorized Access).

* Perform proactive threat hunting across the organization, focusing on identifying low-signature malicious activity and behavioral anomalies.

* Perform basic endpoint forensics and network traffic analysis to identify the intrusion vector and scope of impact.

* Analyze and tune detection rules in SIEM/XDR systems to reduce false positives and improve system efficiency.

* Identify gaps in SOC processes and initiate improvement projects.

Mentor and provide professional guidance to Tier 1 analysts.

Mandatory Requirements:

*1-2 years of experience as a Tier 2 SOC Analyst.

* Proven experience in investigating, analyzing, and responding to information security incidents.

* Proven experience working and investigating in multi-cloud environments (AWS/Azure).

* Hands-on experience with security systems such as FW, IPS, WAF, XDR/EDR, SIEM, Mail Relay/Email Security, Deception Technology, etc..

* Strong understanding of communication protocols (TCP/IP, DNS, HTTP/S) and network traffic analysis using logs and dedicated tools such as Wireshark.

* Ability to perform basic static and dynamic analysis of suspicious files.

* Ability to write technical reports (in Hebrew and English).

Location: Petach-Tikva

💌 To apply, please send your CV to: [email protected]