Security Operations Center (SOC) Analyst

About the role

As a Security Operations Center (SOC) Analyst at CompanyKora, you will monitor, detect, analyze, and respond to cybersecurity threats across our global payment infrastructure. You will work closely with IT, engineering, and security teams to protect our systems and ensure a strong security posture.

Key responsibilities

• Monitor security events and alerts from SIEM, EDR, IDS/IPS, firewalls, and cloud security tools.
• Analyze logs and alerts to identify potential incidents or anomalies.
• Perform initial triage, determine severity, and escalate validated incidents.
• Investigate and respond to incidents such as phishing, malware, and unauthorized access.
• Contain and remediate threats in collaboration with cross‑functional teams.
• Document incidents, actions taken, and lessons learned; support post‑incident reviews.
• Leverage threat intelligence feeds and conduct proactive threat hunting.
• Update detection rules, use cases, and incident response playbooks.
• Support vulnerability management, scan review, prioritization, and remediation tracking.
• Assist in patch validation and security control effectiveness testing.
• Prepare daily/weekly SOC reports and dashboards.

Required profile

• 2‑4 years of experience in a SOC, cybersecurity, or IT security role.
• Minimum a Bachelor’s degree.
• Hands‑on experience with security monitoring tools.

Required skills

• SIEM platforms (e.g., Splunk, QRadar)
• EDR solutions (e.g., CrowdStrike, Microsoft Defender)
• IDS/IPS technologies
• Firewalls and cloud security tools
• Threat intelligence feeds and IOC analysis
• Vulnerability scanning and management
• Patch validation processes
• Security control testing
• Incident response playbooks and runbooks