SOC Investigator – Security Operations Center Analyst

About the role

The SOC Investigator will join our Security Operations Center to provide 24/7 visibility, proactive threat detection, rapid investigation and continuous threat hunting. Working closely with response teams, you will be the front line of defense, ensuring incidents are thoroughly analyzed and mitigated.

Key responsibilities

• Conduct full incident investigations on medium‑ and high‑severity security events.
• Correlate telemetry from multiple sources such as EDR, network, IAM and logs.
• Coordinate with response teams to contain and remediate threats.
• Perform root‑cause and impact analysis for each incident.

Required profile

• Deep understanding of the attacker lifecycle and kill‑chain concepts.
• Experience with memory forensics and host artifact analysis.
• Proficiency in packet capture and traffic analysis.
• Ability to script for data enrichment and automation.

Required skills

• EDR and SOAR platforms
• Volatility and FTK for memory analysis
• Wireshark for network inspection
• Threat intelligence platforms for enrichment and pivoting
• Memory forensics
• Host artifact analysis
• Packet capture
• Traffic analysis
• Scripting