Tryhackme

Cyber Security Analyst (SOC Analyst)

The SOC Analyst is a front-line role in identifying threats and vulnerabilities, and implementing tools to help the team tackle them.

Average Salary $80,000/year

What is a Cyber Security Analyst?

A Cyber Security Analyst is a professional responsible for protecting an organisation’s computer systems, networks, and data from cyber threats. Their primary role involves monitoring, detecting, investigating, analysing, and responding to security incidents. They use a variety of tools and techniques to ensure the security of an organisation’s digital assets, including firewalls, intrusion detection systems, antivirus software, and encryption protocols. Most analysts work as part of a Security Operations Center (SOC), progressing through tiers – Level 1 focuses on identifying and escalating threats; Level 2 investigates further and prioritises; Level 3 handles overall security picture and uplifts the team.

Responsibilities

• Monitor infrastructure and digital assets for any malicious activity
• Respond to alerts and investigate incidents based on severity
• Plan for disaster recovery and create contingency plans in the event of any security breaches
• Work with different departments and stakeholders to draft and review security policies and processes
• Ensure sufficient logging and monitoring is performed for critical assets
• Identify potential weaknesses and implement measures such as firewalls, access gates, encryption, and general security hardening
• Ensure systems are hardened according to best practices and security patches are kept up to date
• Analyse, measure, and monitor risk when using external third parties
• Maintain an information security risk register and assist with internal and external audits relating to information security
• Give advice and guidance to staff on issues such as spam and malicious emails

Skills

The following skills are typically required for a Cyber Security Analyst:

• Strong knowledge of security tools and techniques such as firewalls, SIEM, EDR, SOAR, and incident response frameworks
• Experience in monitoring digital assets, analysing logs, and investigating security incidents
• Understanding of network security, log analysis, threat hunting, and incident response processes
• Ability to create and maintain security policies, procedures, and documentation
• Strong analytical and problem‑solving abilities

Qualifications

• Determined – able to dig deep and stay alert for subtle signs of compromise
• Self‑motivated – can respond quickly to new threats and adapt to changing environments
• Curious – eager to learn new concepts, tools, and emerging exploits
• Mission‑oriented – dedicated to protecting the organisation’s digital assets
• Calm – capable of maintaining focus under pressure

Benefits

• Develop your critical thinking
• Take up numerous opportunities to further your knowledge
• Learn how to operate in a team
• Sharpen your presentation and communication skills
• Handle huge responsibility