SOC Analyst Tier 2 / Incident Responder

About the role

We are looking for a seasoned SOC Analyst Tier 2 / Incident Responder to join our on‑site team in Israel. The role combines security operations, incident response, and client‑facing advisory work, supporting a portfolio of customers while ensuring robust security governance.

Key responsibilities

• Act as a fractional CISO for multiple clients, defining security strategy, governance and risk management.
• Monitor, triage and escalate alerts in a 24/7 SOC, working shift‑based schedules.
• Lead investigations, threat‑hunting activities and incident response for Tier 2 alerts.
• Perform host and network forensics to uncover root causes.
• Manage office operations, vendor relationships, scheduling and procurement to keep the team running smoothly.
• Generate and qualify B2B security leads, maintaining an outbound pipeline and updating CRM records.

Required profile

• 4+ years in security leadership, GRC or consulting with deep knowledge of NIST, ISO/IEC 27001 and regulatory frameworks (GDPR, HIPAA, PCI DSS).
• 2+ years in a SOC environment with hands‑on SIEM experience (Splunk, Microsoft Sentinel).
• 2+ years in incident response or advanced Tier 2 SOC work, strong threat‑hunting instincts and experience in host/network forensics.
• 2+ years in operations or office administration, highly organized across vendors and logistics.
• Fluent in Hebrew and English.

Required skills

• NIST framework
• ISO/IEC 27001
• GDPR, HIPAA, PCI DSS compliance
• Splunk
• Microsoft Sentinel
• SIEM platforms
• Host and network forensics
• CISSP, CISM, GCIH, GCFA certifications (preferred)

What we offer

• Dynamic environment with exposure to multiple client projects.
• Opportunities to develop both technical and advisory expertise.