Security Analyst (SOC L2/L3) - 6-Month Contract (2 Positions)
About the role
Arozen is seeking two experienced Security Analysts for a 6-month contract to join their international Managed Security Services SOC. The role involves monitoring, triaging, and investigating security alerts, leading incident response actions, maintaining incident records, running vulnerability assessments, and tuning security toolsets for a Managed Security as a Service (MSaaS) offering. Candidates must have at least 3 years of SOC/Security Analyst experience, hands-on incident response skills, and familiarity with SIEM, threat intelligence, and various security technologies. The position is fully remote but restricted to candidates based in Sri Lanka, supporting a 24/7 operation for an MSP client.
Must have
- 3+ years in a SOC / Security Analyst role, ideally within an MSP or 24/7 environment
- Proven, hands-on incident response experience (not just alert monitoring)
- Experience with SIEM, threat intelligence and security analytics
- Working knowledge of firewalls, IDS/IPS, AV/EDR, authentication systems, log management and content filtering
- Solid understanding of networks, workstations and servers
- Clear written and spoken English; comfortable dealing directly with international clients
- Calm, methodical problem-solver under pressure; works well independently and in a team
- Bachelor's degree in Cybersecurity, Information Security or a related field
Nice to have
- CrowdStrike Falcon (AV/EDR): investigation, response actions, RTR
- Sumo Logic (SIEM): searches, dashboards, alert tuning
- Certifications such as CompTIA Security+, CySA+, GCIH, CISSP, or CrowdStrike CCFA/CCFR
Technologies
- Authentication
- CISSP
- CompTIA Security+
- CrowdStrike
- Cybersecurity
- EDR
- Firewall
- SIEM
Highlights
Candidates must be based in Sri Lanka and able to work remotely with reliable high-speed internet and a secure workspace. The role is shift-based to support a 24/7 SOC. Immediate or short-notice availability is preferred. Application requires a CV and a short note describing a personally handled security incident.