SOC Analyst (Tier 2) – Cyber Security Operations Center 5470

Are you passionate about cyber security and incident response? We are looking for an experienced SOC Analyst (Tier 2) to join our Cyber Security Operations Center. In this role, you will investigate sophisticated security incidents, lead incident response activities, proactively hunt threats, and collaborate with infrastructure and development teams to strengthen the organization's security posture.

Key Responsibilities

• Investigate and respond to escalated security incidents from Tier 1 analysts.
• Perform in-depth analysis of complex security alerts, cyber incidents, and suspected malicious activities, including malware, phishing attacks, and unauthorized access attempts.
• Conduct proactive Threat Hunting across the enterprise, focusing on identifying low-signature attacks and behavioral anomalies using advanced statistical analysis, long-term event correlation, and detection techniques aligned with the MITRE ATT&CK framework.
• Perform basic Endpoint Forensics and Network Traffic Analysis to determine attack vectors, scope of compromise, and root cause.
• Analyze, tune, and optimize SIEM/XDR detection rules to reduce false positives and improve detection accuracy and operational efficiency.
• Identify operational gaps within the SOC and initiate continuous improvement projects.
• Mentor and provide technical guidance to Tier 1 SOC Analysts.
• Collaborate closely with IT Infrastructure, Cloud, and Development teams to improve detection, response capabilities, and reduce the organization's attack surface.

Required Qualifications

• 2–3 years of experience as a SOC Analyst (previous Tier 1 or Systems/Networking experience is an advantage).
• Proven hands-on experience investigating, analyzing, and responding to cyber security incidents.
• Experience working in multi-cloud environments, including AWS and Azure.
• Practical experience with security technologies such as Firewalls (FW), IPS, WAF, XDR/EDR, and SIEM platforms.
• Strong understanding of networking protocols, including TCP/IP, DNS, and HTTP/HTTPS, with the ability to analyze network traffic.
• Basic experience performing static and dynamic analysis of suspicious files.
• Strong technical documentation and reporting skills in both Hebrew and English.

Preferred Qualifications

• Experience with Python or PowerShell scripting for investigation and security automation.
• Hands-on experience with Microsoft Sentinel, Splunk, or Palo Alto Cortex.
• Strong proficiency in writing advanced KQL and/or SPL queries.
• Cyber security certifications (such as Security+, CySA+, GCIH, GCIA, SC-200, or equivalent) – an advantage.

What We're Looking For

• Strong analytical and investigative mindset.
• Excellent problem-solving and troubleshooting skills.
• Ability to work effectively under pressure in a fast-paced SOC environment.
• Team player with excellent communication and collaboration skills.
• Passion for cyber security, continuous learning, and emerging threats.

If you're looking to take the next step in your cyber security career and work in a challenging, enterprise-scale environment, we'd love to hear from you!