SOC Engineer II

Security Operations:

• Monitor, investigate, triage, and respond to security alerts.
• Perform advanced network analysis, including packet capture review, flow analysis, and traffic anomaly detection.
• Conduct log analysis across diverse systems (cloud, endpoint, network, identity, and applications).

Incident Response:

• Support the Incident Response Team during major incidents, conducting forensic analysis, containment actions, and root cause investigations.
• Assist with preparing incident timelines, evidence collection, and communication updates.
• Participate in threat hunting activities to proactively identify anomalies and potential compromises.

Training & Mentorship:

• Participate in creating training materials, hands-on labs, and procedural documentation to elevate Tier I Engineer capabilities.
• Provide constructive feedback on alert handling, investigative quality, and escalation practices.