L2 SOC Analyst – Level 2 Security Operations Center

About the role

The client, an IT managed service provider, is looking for a Level 2 SOC Analyst to join their Security Operations Centre. The role focuses on threat hunting, incident response and improving SOC processes for both internal and client environments.

Key responsibilities

• Conduct ongoing threat hunting and automate alert/report creation.
• Continuously monitor client and internal security systems, detect and respond to security events.
• Assist in delivering security services, improve SOC procedures and contribute to overall information‑security posture.
• Communicate incident progress to customers, own incident playbooks and participate in on‑call rotation.
• Coach and mentor junior analysts and support product investigation/testing.

Required profile

• Minimum 3 years of experience in a SOC environment and 5 years in cybersecurity.
• Hands‑on experience with SOC tools (SIEM, EDR), vulnerability management and Microsoft security stack (Intune, Azure, ATP, Defender).
• Experience in MSP/MSSP settings, remote team collaboration and familiarity with ISO, PCI‑DSS, CIS or NIST frameworks.
• Relevant certifications such as Microsoft Security certifications, AZ‑900, AZ‑500, SC‑200, CompTIA Security+, etc.

Required skills

• SIEM and EDR platforms.
• Microsoft security stack (Intune, Azure Sentinel, ATP, Defender).
• Scripting languages – PowerShell, Python, regular expressions.
• Threat hunting, incident response and root‑cause analysis.
• Vulnerability management, endpoint protection, cloud security, CASB and DLP solutions.