SOC Executive Analyst – TDR (Security Operations Center)

About the role

We are seeking an Executive Analyst – TDR to join our Security Operations Center (SOC) team in Colombo. The role involves monitoring and managing cybersecurity threats, handling alerts, and conducting incident investigations at L1/L2 level. You will work 12‑hour shifts on a 4‑days‑on/4‑days‑off schedule, providing extended rest periods between shifts.

Key responsibilities

• Monitor cybersecurity threats and security alerts within the SOC environment.
• Perform L1/L2 level alert triage, investigation, and incident analysis.
• Collect evidence, manage cases, and escalate complex incidents per procedures.
• Execute incident response actions and maintain accurate documentation.
• Support detection improvement by identifying false positives and missed detections.
• Conduct effective shift handovers and communicate outstanding cases.

Required profile

• 1–2 years of experience in SOC, TDR, or related cybersecurity operations.
• Experience handling security alerts, incidents, and L1/L2 SOC operations.
• Familiarity with remote or in‑house security monitoring environments.
• Cybersecurity‑related degree or qualification and relevant certifications.
• Strong analytical, problem‑solving, and decision‑making skills.

Required skills

• Experience with SIEM platforms.
• Knowledge of SOAR/XSOAR and EDR tools.
• Understanding of incident response processes.