Negotiable
Undetermined
Remote
Remote
Summary: The role of SOC Tier-2 Cyber Security Specialist involves advanced incident analysis, threat detection, and response within a 24x7 SOC environment. The specialist will conduct deep-dive investigations and correlate data from various security tools to enhance security operations. This position requires a strong background in IT and security, particularly in SOC and threat management. The candidate will also support cloud security monitoring and contribute to automation and AI/ML enhancements.
Key Responsibilities:
- Perform Tier-2 incident investigation and escalation
- Analyze network traffic, IDS/IPS alerts, and SIEM logs
- Respond to security incidents using playbooks and SOPs
- Work with Splunk, SOAR, Proofpoint, SentinelOne, FirePower, and Microsoft Defender
- Support cloud security monitoring across AWS, Azure, and Google Cloud Platform
- Assist with automation and AI/ML-based SOC enhancements
Key Skills:
- 8-12 years of IT/Security experience
- 3+ years in SOC / Threat Management (Tier-2)
- Strong TCP/IP, IDS/IPS, and SIEM (Splunk) knowledge
- Security certifications (CISSP, GSEC, GCED, SSCP) preferred
Salary (Rate): undetermined
City: undetermined
Country: undetermined
Working Arrangements: remote
IR35 Status: undetermined
Seniority Level: undetermined
Industry: IT
We are seeking an experienced SOC Tier-2 Cyber Security Specialist to perform advanced incident analysis, threat detection, and response. The role involves deep-dive investigations, correlating data across multiple security tools, and supporting 24x7 SOC operations.
Key Responsibilities:
Perform Tier-2 incident investigation and escalation
Analyze network traffic, IDS/IPS alerts, and SIEM logs
Respond to security incidents using playbooks and SOPs
Work with Splunk, SOAR, Proofpoint, SentinelOne, FirePower, and Microsoft Defender
Support cloud security monitoring across AWS, Azure, and Google Cloud Platform
Assist with automation and AI/ML-based SOC enhancements
Requirements:
8 12 years of IT/Security experience
3+ years in SOC / Threat Management (Tier-2)
Strong TCP/IP, IDS/IPS, and SIEM (Splunk) knowledge
Certifications: Security certifications (CISSP, GSEC, GCED, SSCP) preferred