SOC Analyst (Tier 2)

Are you passionate about cyber security and incident response? We are looking for an experienced SOC Analyst (Tier 2) to join our Cyber Security Operations Center. In this role, you will investigate sophisticated security incidents, lead incident response activities, proactively hunt threats, and collaborate with infrastructure and development teams to strengthen the organization's security posture.

• 1
  Key Responsibilities Investigate and respond to escalated security incidents from Tier 1 analysts. Perform in-depth analysis of complex security alerts, cyber incidents, and suspected malicious activities, including malware, phishing attacks, and unauthorized access attempts. Conduct proactive Threat Hunting across the enterprise, focusing on identifying low-signature attacks and behavioral anomalies using advanced statistical analysis, long-term event correlation, and detection techniques aligned with the MITRE ATT&CK framework. Perform basic Endpoint Forensics and Network Traffic Analysis to determine attack vectors, scope of compromise, and root cause. Analyze, tune, and optimize SIEM/XDR detection rules to reduce false positives and improve detection accuracy and operational efficiency. Identify operational gaps within the SOC and initiate continuous improvement projects. Mentor and provide technical guidance to Tier 1 SOC Analysts. Collaborate closely with IT Infrastructure, Cloud, and Development teams to improve detection, response capabilities, and reduce the organization's attack surface.

• 2–3 years of experience as a SOC Analyst (previous Tier 1 or Systems/Networking experience is an advantage). Proven hands-on experience investigating, analyzing, and responding to cyber security incidents. Experience working in multi-cloud environments, including AWS and Azure. Practical experience with security technologies such as Firewalls (FW), IPS, WAF, XDR/EDR, and SIEM platforms. Strong understanding of networking protocols, including TCP/IP, DNS, and HTTP/HTTPS, with the ability to analyze network traffic. Basic experience performing static and dynamic analysis of suspicious files. Strong technical documentation and reporting skills in both Hebrew and English.