Job Description

Position: Senior SOC Analyst L2 - Detection Engineering & Threat Hunting Department

Experience: 4 – 6 years

Employment Type: Contract
Location: Remote – USA
Work Schedule: U.S. Business Hours
Client Environment: Enterprise Security Operations

Job Description:

• SOC Analyst L2 - Detection Engineering & Threat Hunting Department.
• Cyber Defence Center (CDC)/Security Operations Center (SOC).

Job Summary:
Responsible for advanced security monitoring, incident investigation, threat hunting, and detection engineering activities. The role focuses on proactive threat identification, detection development, security monitoring optimization, and incident response support.

Must Have:

• SOC
• Splunk ES
• Threat Hunting
• Detection Engineering

Key Responsibilities:

• Perform advanced alert triage, investigation, and incident handling.
• Investigate phishing, malware, ransomware, insider threats, and APT activity.
• Design, develop, tune, and maintain SIEM detection rules and use cases.
• Map detections to MITRE ATT&CK tactics and techniques.
• Conduct proactive threat hunting across endpoints, networks, identities, and cloud environments.
• Leverage threat intelligence to identify emerging threats and detection opportunities.
• Support SOAR automation and security workflow improvements.
• Mentor L1 analysts and provide technical guidance during incident investigations.

Required Technical Skills:

• Microsoft Sentinel, Splunk, QRadar, Elastic Security.
• Microsoft Defender XDR, CrowdStrike Falcon, Cortex XDR.
• MITRE ATT&CK, Threat Hunting, Incident Response, Threat Intelligence.

Please also confirm whether you are open to this opportunity and interested in proceeding after reviewing the above requirements.

If your experience aligns with the above requirements and you're interested in exploring this opportunity, please reply to this email with your updated resume, salary expectations, and a convenient time to connect.

Please answer the following questions below;

• Have you performed advanced threat hunting using MITRE ATT&CK?

• Have you worked with Splunk ES to create SPL queries and detection rules?

• Have you investigated phishing and endpoint incidents using Proofpoint and CrowdStrike?

• Have you automated SOC workflows using Python, PowerShell, or Cortex XSOAR?

• Have you performed root cause analysis for complex security incidents?

• Describe your experience about Enterprise Security SPL?

I look forward to hearing from you. Feel free to let me know if you have any questions or concerns.

Job Tags

Similar Jobs