SOC Tier 3 Analyst & Engineer

About the role

The SOC Tier 3 Analyst & Engineer will leverage advanced technical expertise to investigate escalated cyber security events, differentiate true threats from benign activity, and drive remediation. The role supports a modern security ecosystem that includes AI‑enhanced SIEM, OT monitoring, and threat intelligence platforms, ensuring real‑time visibility and rapid response.

Key responsibilities

• Analyze and triage escalated security incidents from Tier 1/2 analysts, escalating confirmed threats to the Incident Response Lead.
• Perform deep log, network and system data analysis to identify undetected threats and ingest Indicators of Compromise into security tools.
• Develop and quality‑proof technical advisories, SOPs and runbooks for SOC analysts.
• Provide expert technical support to enterprise technicians, coordinate escalations, and report trend‑based improvements to SOC management.

Required profile

• 3‑5 years of operational experience as a cyber security analyst/engineer handling incident response in critical environments.
• Fluent in English and Spanish for communication with global stakeholders.
• Relevant certifications such as CompTIA Security+, CEH, CISSP or SANS GCIA/GPEN.
• Degree in Computer Science, Information Security or a related field is preferred.

Required skills

• SIEM platforms (CrowdStrike Falcon, Palo Alto Cortex XSIAM, Azure Sentinel, Splunk ES, IBM QRadar, ManageEngine Log360).
• Intrusion detection/prevention systems, firewalls, NAC, DLP, DAM, endpoint protection.
• Threat hunting and IOC ingestion using tools like Yara, SNORT, Nozomi Networks.
• Scripting and automation with Python, PowerShell, Bash.
• Strong knowledge of TCP/IP, networking protocols, packet capture (PCAP) analysis.
• Experience with OT environments, SCADA/ICS and industrial network security.