Security Operations Center Analyst

About the role

Grant Thornton’s Cyber Fusion Centre is looking for a technically strong Senior SOC Analyst to join its follow‑the‑sun security operations team. You will own the full security incident lifecycle in a tierless SOC environment.

Key responsibilities

• Manage end‑to‑end incident handling, from real‑time monitoring and triage to evidence review, response coordination and closure.
• Analyze detections using CrowdStrike Falcon Next‑Gen SIEM, correlate events and perform query‑based investigations.
• Conduct static and dynamic malware analysis and examine PCAP files to extract network IOCs.
• Execute incident response plans, support containment and eradication, and collaborate with IT, IAM and infrastructure teams.
• Identify gaps in detections, validate alerts and recommend improvements to SOC runbooks and correlation rules.

Required profile

• 2+ years of experience in security operations, SOC monitoring, SIEM/EDR or incident response (MDR/MSSP or enterprise preferred).
• Bachelor’s degree in Computer Science, Cybersecurity, Information Security or equivalent practical experience.
• Ability to make calm, structured decisions under pressure and perform root‑cause analysis.

Required skills

• Hands‑on experience with CrowdStrike Falcon Next‑Gen SIEM/EDR.
• Familiarity with case management platforms such as ServiceNow.
• Knowledge of SOAR orchestration and automation tools.
• Deep understanding of the MITRE ATT&CK framework and incident response lifecycles.
• Experience with malware static/dynamic analysis and PCAP traffic analysis.