Tier 2 SOC analyst responsible for detecting, investigating, and responding to security incidents. Duties include packet-level network forensics, malware and threat analysis, vulnerability assessment, tuning detections, producing reporting, mentoring junior analysts, coordinating cross-functional teams, and providing after-hours on-call support.

Lead and govern SIEM and DLP operations, manage security managed service providers, participate in CSIRT incident response, perform vulnerability and penetration test remediation, administer controls and account reviews, and provide guidance on malware and security tool use (firewalls, IDS/IDP, anti-malware). Support audits and implement security standards and procedures across diverse platforms.