SOC Analyst – Security Operations Center

About the role

The Security Operations Center (SOC) Analyst will monitor, detect, investigate and respond to security incidents across Mobilink Bank. You will work with a range of security tools to ensure timely resolution of alerts and continuously improve the bank’s detection capabilities.

Key responsibilities

• Monitor and investigate alerts using SIEM, XDR/EDR, DLP, DAM, PAM, WAF, IDS/IPS and firewall technologies.
• Perform advanced log analysis, event correlation, IOC investigation and root‑cause analysis.
• Respond to incidents such as malware, phishing, account compromise, privilege abuse, lateral movement and data exfiltration.
• Conduct proactive threat hunting using SIEM, EDR/XDR and threat intelligence.
• Develop, tune and optimise security tools with correlation rules, use cases, queries and dashboards.
• Identify monitoring gaps, onboard new log sources and convert threat intelligence into actionable detection use cases.
• Maintain incident records, timelines, detailed reports and SOC runbooks.
• Coordinate with IT, network, infrastructure and application teams for containment and remediation.

Required profile

• 1‑3 years of SOC or cybersecurity experience, preferably in banking or financial services.
• Strong knowledge of SOC operations, incident response and MITRE ATT&CK framework.
• Understanding of Windows, Linux, networking, Active Directory and authentication mechanisms.
• Hands‑on experience with IBM QRadar or equivalent SIEM.

Required skills

• SIEM (IBM QRadar or equivalent)
• XDR/EDR, DLP, DAM, PAM, WAF, IDS/IPS, firewalls
• Windows, Linux, networking, Active Directory
• MITRE ATT&CK, threat hunting, IOC analysis
• Scripting in PowerShell, Python or Bash