Security Operations Center, (SOC) Analyst at Korapay

About The Role

• As a SOC Analyst, you will be responsible for monitoring, detecting, analyzing, and responding to cybersecurity threats and incidents within the organization. This role plays a critical part in maintaining the organization's security posture by leveraging security tools, threat intelligence, and established processes to identify and mitigate risks in real time.

Here are a couple of things you'll be doing:

• Monitor security events and alerts from SIEM, EDR, IDS/IPS, firewalls, and cloud security tools
• Analyze logs and alerts to identify potential security incidents or anomalies
• Perform initial triage to determine severity, impact, and scope of threats
• Escalate validated incidents based on defined procedures
• Investigate and respond to security incidents (e.g., phishing, malware, unauthorized access)
• Contain and remediate threats in collaboration with IT, Engineering and security teams
• Document incidents, actions taken, and lessons learned
• Support post-incident reviews and root cause analysis
• Leverage threat intelligence feeds to identify emerging threats and indicators of compromise (IOCs)
• Conduct proactive threat hunting activities to detect hidden threats
• Update detection rules and use cases based on the evolving threat landscape
• Support vulnerability management activities (scan review, prioritization, remediation tracking)
• Assist in patch validation and security control effectiveness testing
• Collaborate with engineering teams to improve security controls and detection capabilities
• Maintain accurate incident logs and case management records
• Prepare daily/weekly SOC reports and dashboards
• Develop and update incident response playbooks and runbooks
• Other duties as assigned by the CISO

Requirements
Here's what we're looking for:

• 2-4 years of experience in a SOC, cybersecurity, or IT security role
• Minimum of a Bachelor's degree certificate
• Hands-on experience with security tools such as SIEM (e.g., Splunk, QRadar), EDR (e.g., CrowdStrike, Defender), and firewalls
• Understanding of network protocols, operating systems, and common attack vectors
• Familiarity with incident response processes and frameworks
• Knowledge of frameworks such as MITRE ATT&CK, NIST, or ISO 27001
• Scripting or automation skills (Python, PowerShell, Bash) is preferred
• Good communication & interpersonal skills
• Positive attitude
• Ability to handle stress appropriately and interact well with others

Key Skills:

• Strong analytical and investigative mindset
• Ability to work under pressure in a fast-paced, 24/7 environment
• Attention to detail and critical thinking skills
• Effective communication and incident documentation skills
• Team collaboration and cross-functional coordination
• Continuous learning mindset to stay ahead of evolving threats