About the role: The L2 SOC Analyst monitors the alerts generated from our clients and validates them in order to determine what actions are required to response them. As an L2 SOC Analyst, you will be responsible for deep analysis of security alerts, incident validation, technical escalation and in general, work together with other cybersecurity teams to keep our clients secured.

Responsibilities

• Analyzing events or incidents to triage the issue or find the root cause
• Provide full monitoring coverage during their shifts
• Investigate security alerts across endpoint, network, identity, email, and cloud environments
• Execute containment and response actions in accordance with approved playbooks and client procedures
• Conduct and document the entire incident life cycle, managing and coordinating security incidents, escalating, and providing other support
• Write comprehensive reports including assessment-based findings, outcomes and propositions for further system security enhancement i.e. tuning detection rules, playbook updates etc.
• Contribute to maintaining agreed service levels (SLAs) and quality standards for managed security services
• Other duties as required by your team lead(s) or the executive team

Success in this role includes:

• Self-motivated with the ability to work independently
• Flexibility in adapting previous experience to fit the needs and culture of our team
• Experience with, or understanding of, networking fundamentals and concepts
• Broad exposure to security disciplines and understanding of models and principles behind core security concepts
• Hands‑on experience with SIEM and EDR platforms (e.g., Microsoft Sentinel, Splunk, Microsoft Defender, CrowdStrike).
• C1 English proficiency
• Growing your expertise through learning and professional development
• Consistently exemplifying BDO’s core values—Integrity, Respect, and Collaboration—in every facet of your work
• Contributing to the ongoing advancement of BDO CR SOC team by fostering a culture of knowledge-sharing, continuous improvement, and technical excellence

Preferred:

• Degree or diploma in a technical field, ideally with a focus on information security, or 3+ years of equivalent experience in a security or customer support role

Certification(s) Preferred:

• SANS GCIH
• MS SC-200