Security Operations Specialist (SOC L3 Analyst)

About the role

We are seeking an experienced Security Operations Specialist to join our SOC as a Level 3 Analyst. You will lead investigations of high‑severity incidents, perform advanced threat hunting, and guide junior analysts in complex security scenarios.

Key responsibilities

• Lead response to high‑severity and complex cyber incidents across endpoints, servers, networks, cloud and identity infrastructure.
• Conduct detailed malware, ransomware, persistence, lateral movement, privilege escalation and data exfiltration analyses.
• Perform threat hunting using SIEM, EDR, NDR and other telemetry sources.
• Develop, tune and maintain advanced SIEM detection rules, correlation searches and use cases.
• Provide technical escalation support to SOC L1/L2 analysts and produce comprehensive incident reports.
• Maintain and improve IR procedures, playbooks and investigation methodologies.
• Collaborate with IT, network and security teams during containment, eradication and recovery phases.

Required profile

• Bachelor's degree in Cybersecurity, Computer Science, Information Security or related field.
• 5+ years of experience in SOC operations, incident response or related cybersecurity roles.
• Strong hands‑on experience with Windows and Linux forensic artifacts.
• Proven track record investigating malware, ransomware, phishing, credential compromise and lateral movement.
• Relevant certifications (e.g., G...)

Required skills

• Windows operating system
• Linux operating system
• SIEM platforms
• EDR solutions
• NDR and SOAR tools
• Firewall and WAF technologies
• Volatility
• KAPE
• FTK
• Velociraptor
• Threat hunting techniques
• Malware analysis
• Digital forensics
• Incident response methodologies
• MITRE ATT&CK framework