SOC L2 Analyst
- Role
- Security
- Experience
- Senior
The listing doesn't say where it hires from. Check the description or the employer's site before applying.
No BS summary
SOC L2 Analyst with 5+ years in security operations / incident response. Requires proven proficiency with SIEM tools and familiarity with EDR, IDS/IPS and perimeter security; practical experience securing cloud-native environments. Role focuses on threat hunting, deep-dive triage, incident ownership and SOC hardening for a fintech ecosystem.
Core skills
Required skills
Optional skills
About the Role
Our client is building a world-class defense against an increasingly sophisticated threat landscape, and we are looking for a sharp, proactive SOC L2 Analyst to join the Information Security team. You will serve as a critical escalation point for our security operations, bridging the gap between automated detection and incident resolution. If you thrive in high-stakes environments and are passionate about threat hunting and incident hardening, this is your opportunity to directly influence the security posture of their fintech ecosystem.
What You Will Do
Elevated Monitoring: Maintain deep visibility into our infrastructure by actively monitoring security alerts across SIEM, IDS/IPS, firewalls, and EDR platforms. Deep-Dive Triage & Analysis: Conduct detailed investigations of complex security events, analyzing network traffic and system logs to identify malicious patterns and vulnerabilities that bypass automated rules. Incident Ownership: Lead the response and containment of security incidents, coordinating cross-functional efforts and ensuring timely, effective resolution during critical events. Advanced Documentation: Maintain meticulous records of security investigations, contributing to high-level incident reporting and maintaining our internal knowledge base. Continuous Hardening: Drive operational improvement by leading post-incident reviews, identifying gaps in our defenses, and refining SOC procedures and automation playbooks.
What You Bring
Experience: 5+ years of hands-on experience in security operations, incident response, or advanced threat monitoring. Security Stack: Proven proficiency with industry-standard SIEM tools (e.g., Splunk, Microsoft Sentinel, QRadar, ELK) and familiarity with EDR, IDS/IPS, and perimeter security solutions. Technical Acumen: Strong working knowledge of cybersecurity principles, threat vectors, network protocols, and application-layer attacks. Cloud Proficiency: Practical experience securing cloud-native environments, with a preference for AWS and Azure. Methodology: Strong grasp of security frameworks like MITRE ATT&CK and the Cyber Kill Chain to guide threat hunting activities. Analytical Rigor: A demonstrated track record of successful security investigations and proactive threat hunting. Communication: Exceptional attention to detail and the ability to articulate complex technical findings to both engineering teams and non-technical stakeholders. Bonus Qualifications: A Bachelor’s degree in Computer Science, Cybersecurity, or a related field, and familiarity with compliance frameworks (ISO27001, ISO27701, PCI DSS, GDPR).
What's in It for You
True Ownership: You will have the autonomy to influence our security roadmap and make architectural decisions that protect our production environments. Impactful Work: Your work directly safeguards real-money flows and critical financial data, making a tangible difference in the security of our users. Collaborative Culture: Join a cross-functional team of experts in engineering, fraud, and payments who value security and knowledge sharing. Continuous Growth: We invest in your professional development through support for advanced certifications, conference attendance, and research time. Competitive Benefits: We offer a comprehensive benefits package, including competitive compensation, health coverage, and flexible working arrangements.
What you'll do
- Maintain deep visibility into our infrastructure by actively monitoring security alerts across SIEM, IDS/IPS, firewalls, and EDR platforms.
- Conduct detailed investigations of complex security events, analyzing network traffic and system logs to identify malicious patterns and vulnerabilities that bypass automated rules.
- Lead the response and containment of security incidents, coordinating cross-functional efforts and ensuring timely, effective resolution during critical events.
- Maintain meticulous records of security investigations, contributing to high-level incident reporting and maintaining our internal knowledge base.
- Drive operational improvement by leading post-incident reviews, identifying gaps in our defenses, and refining SOC procedures and automation playbooks.
What they require
- 5+ years of hands-on experience in security operations, incident response, or advanced threat monitoring.
- Proven proficiency with industry-standard SIEM tools (e.g., Splunk, Microsoft Sentinel, QRadar, ELK).
- Familiarity with EDR, IDS/IPS, and perimeter security solutions.
- Practical experience securing cloud-native environments.
- Strong grasp of security frameworks like MITRE ATT&CK and the Cyber Kill Chain to guide threat hunting activities.
Benefits
- Support for advanced certifications, conference attendance, and research time.
- Competitive compensation.
- Health coverage.
- Flexible working arrangements.
- Autonomy to influence the security roadmap and make architectural decisions.