SOC Analyst - L1 (Security Delivery Senior Analyst)

About the role

This Security Delivery Senior Analyst position sits within Security Operations and takes ownership of security events escalated from L1 analysts. The role covers deeper triage, investigation and analysis, helping ensure incidents are handled consistently according to established processes and runbooks, while contributing to stronger playbooks, incident response procedures and SIEM detection use cases.

Key responsibilities

• Triage and investigate incidents escalated from L1, analyze and categorize events by severity and escalate complex or high-risk incidents
• Maintain accurate investigation findings, evidence and incident documentation
• Support SIEM administrators and security engineering teams in building and improving detection use cases, and point out detection gaps
• Develop, maintain and improve SOPs, investigation playbooks and Incident Response plans, and capture lessons learned
• Collaborate with L1 analysts and other security teams on incident handling and knowledge sharing

Required profile

• Experience in a SOC or cybersecurity monitoring environment
• Hands-on experience with event triage, investigation and incident escalation
• Understanding of incident response, SOC procedures and runbooks
• Ability to investigate and correlate events and identify potentially malicious activity
• Strong analytical, troubleshooting and problem-solving skills, with strong written and verbal communication

Required skills

• Experience using SIEM technologies
• Creating or maintaining SOPs, playbooks and Incident Response documentation
• Understanding of SIEM detection use cases and correlation rules
• Bonus: SIEM use-case development, EDR, SOAR, MITRE ATT&CK, threat hunting and SOC certifications