L2 Security Operations Center Analyst - SIEM Tools

Description : Role Overview :

The SOC Level 2 Analyst is responsible for advanced monitoring, detection, investigation, and response to security incidents within the organizations IT environment.

The L2 Analyst acts as the escalation point for Level 1 analysts, conducting in-depth analysis of security alerts, coordinating incident response, and recommending improvements to enhance the organizations security posture.

Key Responsibilities :

Monitoring & Analysis :

• Monitor and analyze security events from SIEM and other monitoring tools (e.g., Splunk, QRadar, Sentinel, ArcSight).
• Investigate escalated alerts from L1 analysts to determine true positives and identify potential threats.
• Correlate events from multiple data sources (firewalls, IDS / IPS, endpoint security, email gateways, etc.) to detect advanced attacks.
• Perform threat hunting activities to proactively identify suspicious activity or potential compromise.

Incident Response :

Threat Intelligence & Reporting :

Process & Improvement :

(ref : hirist.tech)