SOC Analyst at Eko Maintenance Limited

Role Summary

• We are seeking a SOC Analyst to monitor, investigate, and respond to cybersecurity threats across the organization’s IT environment.
• The analyst will work with SIEM, EDR, network security, and other security tools to identify suspicious activity, investigate incidents, and support timely remediation.

Key Responsibilities

• Monitor security alerts and events using SIEM platforms.
• Investigate and triage suspected security incidents.
• Analyze logs from endpoints, servers, firewalls, IDS/IPS, cloud environments, and applications.
• Perform alert correlation, threat analysis, and incident investigation.
• Identify indicators of compromise (IOCs), including malicious IPs, domains, hashes, and suspicious processes.
• Escalate confirmed or complex incidents to senior analysts or incident-response teams.
• Support incident response, containment, eradication, and recovery activities.
• Conduct basic threat hunting and identify suspicious patterns or anomalous behavior.
• Analyze phishing emails and investigate potentially compromised accounts.
• Document incidents, investigations, findings, and remediation actions.
• Maintain and improve security monitoring rules, detection logic, and dashboards.
• Assist with vulnerability management and security assessments where required.
• Stay informed about emerging threats, attack techniques, and MITRE ATT&CK techniques.
• Follow established security policies, procedures, and incident-response playbooks.

Key Performance Indicators

• Alert triage and response time
• False-positive reduction
• Incident detection and escalation accuracy
• Mean Time to Detect (MTTD)
• Mean Time to Respond (MTTR)
• Quality and completeness of investigation documentation
• Effectiveness of detection rules and threat-hunting activities.

Qualifications

• Degree or diploma in Cybersecurity, Computer Science, Information Technology, or a related field.
• Relevant certifications are an advantage, such as:
  • CompTIA Security+
  • CompTIA CySA+
  • Blue Team Level 1 (BTL1)
  • GIAC certifications
  • Microsoft security certifications
  • Splunk certifications

Typical Experience:

• Junior SOC Analyst: 0–2 years
• SOC Analyst: 2–4 years
• Senior SOC Analyst: 4+ years

Required Skills:

• Understanding of SOC operations and incident response.
• Knowledge of SIEM technologies such as Microsoft Sentinel, Splunk, QRadar, or Elastic.
• Experience with EDR/XDR platforms.
• Strong understanding of:
  • TCP/IP and networking
  • DNS, HTTP/HTTPS, SMTP
  • Windows and Linux
  • Active Directory
  • Firewalls and IDS/IPS
  • Authentication and access controls
  • Ability to analyze security logs and correlate events.
• Knowledge of common attacks such as phishing, malware, credential theft, brute force, ransomware, and web attacks.
• Familiarity with MITRE ATT&CK, Cyber Kill Chain, and IOC analysis.
• Basic scripting knowledge, particularly PowerShell or Python, is advantageous.