SOC T2 Analyst

The SOC Tier 2 Analyst acts as the primary escalation point for Tier 1 analysts, leading the investigation and coordination of security incidents. This role is critical to maintaining strong cybersecurity defenses by conducting advanced threat detection, in-depth incident analysis, and supporting response efforts. The analyst contributes to process improvement, threat hunting, and ongoing SOC maturity through mentoring and collaboration across security teams.

Roles & Responsibilities

• Act as the main escalation point for Tier 1 analysts, offering technical expertise and guidance
• Perform advanced analysis of security events using SIEM, EDR, IDS / IPS, and firewall logs
• Investigate and respond to threats aligned with MITRE ATT&CK tactics and techniques
• Lead incident response activities including containment, eradication, and recovery
• Conduct forensic analysis and artifact review to identify root cause and scope
• Collaborate with threat intelligence and threat hunting teams to enhance detection capabilities
• Develop and refine SOC standard operating procedures (SOPs) and playbooks
• Coordinate with engineering teams to tune and optimize security tools and controls
• Mentor Tier 1 analysts to elevate SOC capabilities and ensure knowledge transfer
• Support security audits, compliance initiatives, and reporting as needed

Basic Qualifications

Must-Have Skills

Good-to-Have Skills

Professional Certifications

CompTIA Security+, CEH, GSEC, GCFA, MTA Security Fundamentals, CISSP (preferred)

Soft Skills

Skills Required

Siem, EDR, IDS / IPS, Incident Response, Threat Hunting, Powershell, Bash Scripting