SOC Specialist – After-Hours Cybersecurity Analyst

About the role

The After‑Hours Cybersecurity Support Analyst (SOC Specialist) provides continuous security monitoring and first‑line incident response during night shifts. Working independently, the analyst ensures that alerts from core security tools are triaged, escalated, and documented to keep the organization’s systems, data and networks protected around the clock.

Key responsibilities

• Monitor alerts from security platforms such as Elastic, Crowdstrike, Darktrace, Flare and Wiz.
• Analyze, categorize and prioritize alerts to assess severity and potential impact.
• Escalate confirmed or high‑severity incidents to the on‑call security team following the escalation matrix.
• Collect relevant logs, screenshots and evidence for each incident.
• Notify stakeholders (security lead, IT operations, network team) according to the communication plan.
• Document all actions, alerts and response steps in the incident management/ticketing system.
• Perform health checks on SIEM, antivirus, firewalls and IDS/IPS to verify availability and integrity.
• Provide a concise shift handover summary to the daytime security team.

Required profile

• 1‑2 years of experience in a NOC, SOC or related cybersecurity role.
• Solid understanding of cybersecurity fundamentals, network protocols and threat indicators.
• Ability to follow SOPs, maintain accurate records and communicate clearly in written and verbal form.

Required skills

• Experience with SIEM tools (e.g., Elastic).
• Familiarity with endpoint detection platforms such as Crowdstrike.
• Knowledge of threat‑detection solutions like Darktrace, Flare and Wiz.
• Proficiency in log collection, analysis and evidence handling.
• Understanding of antivirus, firewall, IDS/IPS technologies.
• Use of ticketing/incident‑management systems.