Middle SOC L2 Analyst

About your key responsibilities and impact:

• Performing in-depth analysis of security events and logs, handling complex security cases and alerts escalated from L1 analysts;
• Taking ownership of incident triage, conducting thorough assessment and response, and managing the entire Incident Response Process, including post-incident analysis and reporting;
• Developing, updating, and maintaining SOC documentation, playbooks, and automations to improve response actions and optimize routine processes;
• Conducting regular system evaluations to ensure compliance with security requirements, analyze security tool reports, and coordinate remediation efforts;
• Supporting L1 analysts in monitoring, incident management, and alert resolution, providing guidance, and conducting periodic knowledge checks;
• Collaborating with other security and IT support teams to enhance SOC processes and coordinate incident response and resolution efforts.

Essential professional experience:

• Bachelor’s degree in Computer Science, Information Security, or related field;
• 2+ years of experience in cybersecurity;
• Strong understanding of web attack tactics, threats, and vulnerabilities of modern web applications;
• Proficiency in analyzing security logs, network traffic, and system logs to detect incidents;
• Deep knowledge of networking protocols (TCP/IP, UDP, DNS, FTP, SSH, SSL/TLS, HTTP) and network security technologies (firewalls, VPNs);
• Hands-on experience with security tools such as WAF, SIEM, EDR, IDS/IPS;
• Proficiency in Windows, Linux/Unix, and other operating systems for security event analysis;
• Strong analytical and critical thinking skills, with attention to detail and ability to work autonomously;
• Experience with SOAR, automation scripts, and security playbook development;
• English proficiency B1 level or higher;
• Fluent in Ukrainian or Russian languages.Experience with k8s containers, forensic and DLP tools, and vulnerability scanners;
• Familiarity with security frameworks (NIST, GDPR, HIPAA, PCI DSS);
• Relevant certifications (CySA+, CSA, CompTIA Security+) are a plus.