About This Role
Working as a SOC Analyst at Alykas involves protecting clients from cyber threats through advanced security monitoring, analysis, and incident response within a multi-tenant Security Operations Center. The role focuses on supporting US-based clients with cutting-edge cybersecurity technologies, requiring strong communication and collaboration skills for effective responses to security challenges.
Responsibilities
- Monitor and analyze security alerts, investigate IOCs and document findings comprehensively
- Conduct initial triage, assess incident severity, and take appropriate response actions
- Respond to incidents following established playbooks and escalation procedures
- Collaborate with cross-functional teams to resolve security incidents efficiently
- Maintain accurate documentation of investigations, incidents, and remediation activities
- Perform proactive threat hunting to detect hidden or emerging threats
- Develop hypotheses based on threat intelligence and validate them
- Demonstrate a passion for SOC automation, focusing on reducing manual workload and repetitive tasks
- Correlate alerts with threat intelligence and frameworks such as MITRE ATT&CK
- Tune and optimize security tool rules, policies, and detection use cases to improve accuracy
- Develop and enhance incident response playbooks and automation workflows
- Stay current with emerging cyber threats, technologies, and defensive strategies
- Conduct initial triage, assess incident severity, and take appropriate response actions
Requirements
- 2–5 years of experience in a Security Operations Center (SOC)
- Proficiency with SOC tools (SIEM, EDR, XDR, Email Security solutions)
- Hands-on experience with Incident Response (IR)
- Relevant certifications such as Security+, CySA+, BTL1, eCIR, GSEC, GCIH, etc.
- Strong client-facing communication and reporting skills
- Fluent English communication skills (both written and verbal), essential for working with Alykas's international clients
Nice to have:
- Experience with automation platforms (SOAR) and scripting (e.g., Python)
- Exposure to vulnerability management and SCCM
- Background in Cyber Threat Hunting (CTH) or Cyber Threat Intelligence (CTI)
- Knowledge of IAM and PAM
- Experience with Microsoft 365 and Azure environments
Benefits
- Hands-on exposure to US-based clients and international cybersecurity operations
- Opportunity to learn and adapt to advanced US cybersecurity practices, frameworks, and threat landscape