E
SOC Analyst at Eko Maintenance Limited
Eko Maintenance Limited
October 6, 2026
Full-time
On-site
Role Summary
We are seeking a SOC Analyst to monitor, investigate, and respond to cybersecurity threats across the organization's IT environment.
The analyst will work with SIEM, EDR, network security, and other security tools to identify suspicious activity, investigate incidents, and support timely remediation.
Key Responsibilities
Monitor security alerts and events using SIEM platforms.
Investigate and triage suspected security incidents.
Analyze logs from endpoints, servers, firewalls, IDS/IPS, cloud environments, and applications.
Perform alert correlation, threat analysis, and incident investigation.
Identify indicators of compromise (IOCs), including malicious IPs, domains, hashes, and suspicious processes.
Escalate confirmed or complex incidents to senior analysts or incident-response teams.
Support incident response, containment, eradication, and recovery activities.
Conduct basic threat hunting and identify suspicious patterns or anomalous behavior.
Analyze phishing emails and investigate potentially compromised accounts.
Document incidents, investigations, findings, and remediation actions.
Maintain and improve security monitoring rules, detection logic, and dashboards.
Assist with vulnerability management and security assessments where required.
Stay informed about emerging threats, attack techniques, and MITRE ATT&CK techniques.
Follow established security policies, procedures, and incident-response playbooks.
Key Performance Indicators
Alert triage and response time
False-positive reduction
Incident detection and escalation accuracy
Mean Time to Detect (MTTD)
Mean Time to Respond (MTTR)
Quality and completeness of investigation documentation
Effectiveness of detection rules and threat-hunting activities.
Qualifications
Degree or diploma in Cybersecurity, Computer Science, Information Technology, or a related field.
Relevant certifications are an advantage, such as:
CompTIA Security+
CompTIA CySA+
Blue Team Level 1 (BTL1)
GIAC certifications
Microsoft security certifications
Splunk certifications
Typical Experience:
Junior SOC Analyst: 0 - 2 years
SOC Analyst: 2 - 4 years
Senior SOC Analyst: 4+ years
Required Skills:
Understanding of SOC operations and incident response.
Knowledge of SIEM technologies such as Microsoft Sentinel, Splunk, QRadar, or Elastic.
Experience with EDR/XDR platforms.
Strong understanding of:
TCP/IP and networking
DNS, HTTP/HTTPS, SMTP
Windows and Linux
Active Directory
Firewalls and IDS/IPS
Authentication and access controls
Ability to analyze security logs and correlate events.
Knowledge of common attacks such as phishing, malware, credential theft, brute force, ransomware, and web attacks.
Familiarity with MITRE ATT&CK, Cyber Kill Chain, and IOC analysis.
Basic scripting knowledge, particularly PowerShell or Python, is advantageous.
We are seeking a SOC Analyst to monitor, investigate, and respond to cybersecurity threats across the organization's IT environment.
The analyst will work with SIEM, EDR, network security, and other security tools to identify suspicious activity, investigate incidents, and support timely remediation.
Key Responsibilities
Monitor security alerts and events using SIEM platforms.
Investigate and triage suspected security incidents.
Analyze logs from endpoints, servers, firewalls, IDS/IPS, cloud environments, and applications.
Perform alert correlation, threat analysis, and incident investigation.
Identify indicators of compromise (IOCs), including malicious IPs, domains, hashes, and suspicious processes.
Escalate confirmed or complex incidents to senior analysts or incident-response teams.
Support incident response, containment, eradication, and recovery activities.
Conduct basic threat hunting and identify suspicious patterns or anomalous behavior.
Analyze phishing emails and investigate potentially compromised accounts.
Document incidents, investigations, findings, and remediation actions.
Maintain and improve security monitoring rules, detection logic, and dashboards.
Assist with vulnerability management and security assessments where required.
Stay informed about emerging threats, attack techniques, and MITRE ATT&CK techniques.
Follow established security policies, procedures, and incident-response playbooks.
Key Performance Indicators
Alert triage and response time
False-positive reduction
Incident detection and escalation accuracy
Mean Time to Detect (MTTD)
Mean Time to Respond (MTTR)
Quality and completeness of investigation documentation
Effectiveness of detection rules and threat-hunting activities.
Qualifications
Degree or diploma in Cybersecurity, Computer Science, Information Technology, or a related field.
Relevant certifications are an advantage, such as:
CompTIA Security+
CompTIA CySA+
Blue Team Level 1 (BTL1)
GIAC certifications
Microsoft security certifications
Splunk certifications
Typical Experience:
Junior SOC Analyst: 0 - 2 years
SOC Analyst: 2 - 4 years
Senior SOC Analyst: 4+ years
Required Skills:
Understanding of SOC operations and incident response.
Knowledge of SIEM technologies such as Microsoft Sentinel, Splunk, QRadar, or Elastic.
Experience with EDR/XDR platforms.
Strong understanding of:
TCP/IP and networking
DNS, HTTP/HTTPS, SMTP
Windows and Linux
Active Directory
Firewalls and IDS/IPS
Authentication and access controls
Ability to analyze security logs and correlate events.
Knowledge of common attacks such as phishing, malware, credential theft, brute force, ransomware, and web attacks.
Familiarity with MITRE ATT&CK, Cyber Kill Chain, and IOC analysis.
Basic scripting knowledge, particularly PowerShell or Python, is advantageous.