SOC Analyst L2

Provide second-line security managed services by proactively monitoring client infrastructures, reviewing tickets, and resolving security incidents and requests while meeting SLAs. Investigate and troubleshoot incidents to determine root cause, update knowledge articles, and coordinate incident containment and remediation. Administer and build SIEM environments (deployments, user/license management, log sources, upgrades, backups), integrate threat-intelligence feeds, and support reporting, automation opportunities, and disaster recovery testing.