SOC Analyst (Tier 2)

RedFortress Technologies · Pakistan

Triage, investigate and escalate alerts across client environments, and improve the detections behind them.

Responsibilities

• Investigate escalated alerts across endpoint, identity and network telemetry
• Lead containment steps during confirmed incidents
• Author and tune detection rules mapped to MITRE ATT&CK
• Maintain runbooks and handover notes across shifts
• Support client reporting with accurate, contextual analysis

Requirements

• — Two or more years in a SOC or incident response function
• — Practical experience with at least one SIEM and one EDR platform
• — Solid grasp of Windows and Linux internals and authentication flows
• — Ability to explain a technical incident to a non-technical stakeholder