SOC Analyst

Our client is looking for a SOC Analyst to join their SOC team. This role is ideal for cybersecurity professionals who thrive in fast-paced, high-stakes environments and are passionate about detection, investigation, and response to cyber threats. You will work with cutting-edge security technologies, including Cortex XDR, Cortex XSIAM, and Prisma Access, to protect our customers’ on-premise and cloud environments., * Threat Monitoring & Triage - Analyze security alerts in Cortex XDR/XSIAM, prioritize incidents, and escalate as necessary.

• Incident Response - Investigate, contain, and remediate cyber threats.
• Threat Hunting - Proactively search for indicators of compromise (IOCs) and tactics, techniques, and procedures (TTPs) using Cortex analytics and custom queries.
• Forensic Analysis - Conduct endpoint and network forensic investigations to determine attack vectors and impact.
• SIEM & Logging Optimization - Work with security engineers to improve log collection, correlation, and detection rules in Cortex XSIAM.
• Customer Collaboration - Provide clear, professional communication with customers regarding security incidents, findings, and remediation steps.
• Process Improvement - Contribute to SOC automation, playbook enhancements, and detection rule tuning.
• Threat Intelligence Integration - Apply threat intelligence feeds to enrich investigations and improve detections.

• 2+ years of experience in a Security Operations Center (SOC) or similar role.
• Familiarity with Cortex XDR, SIEM platforms, other EDR/XDR solutions, and some network security technologies.
• Understanding of the MITRE ATT&CK Framework.
• Experience analyzing security alerts, investigating threats, and escalating incidents.
• Experience in log analysis, threat hunting, and incident response processes.
• Strong critical thinking, problem-solving, and communication skills.

Preferred:

• Experience working with Cortex XSIAM or Prisma Access.
• Scripting skills (Python, PowerShell, or Bash) for automation.
• Understanding of cloud security (Azure, AWS, Google Cloud Platform) and hybrid environments.
• Certifications such as Palo Alto Networks PCCET, PCNSE, or PCSAE, or industry-recognized certs like Security+, CySA+, IA.