L3 SOC Analyst / Incident Response Analyst

About the role

ProArch is seeking a highly skilled L3 SOC Analyst / Incident Response Analyst to join its Security Operations Center. The role operates in a Managed Security Services Provider environment, supporting multiple customers across diverse industries. You will lead advanced incident detection, investigation, and response activities, helping to protect client infrastructures from sophisticated cyber threats.

Key responsibilities

• Conduct deep‑dive incident response and threat investigation for complex security events.
• Design, develop, and tune detection rules and automation workflows.
• Perform DFIR (Digital Forensics and Incident Response) operations and threat hunting activities.
• Collaborate with cross‑functional teams to remediate incidents and improve security posture.
• Engineer and maintain security platforms, focusing on Microsoft security solutions.
• Optimize response workflows and contribute to SOC automation initiatives.

Required profile

• Proven experience in a senior SOC or incident response role within an MSSP or similar environment.
• Strong analytical mindset with the ability to handle high‑pressure, time‑critical incidents.
• Excellent communication skills for coordinating with customers and internal teams.
• Commitment to continuous learning in the fast‑evolving cybersecurity landscape.

Required skills

• Incident response
• Threat investigation
• Detection engineering
• SOC automation
• Threat hunting
• Security platform engineering (Microsoft security stack)
• DFIR operations