Senior Analyst i Qendrës së Operacioneve të Sigurisë

About the role

The Senior Analyst in the Security Operations Center (SOC) leads advanced detection, investigation and response activities across the bank's cyber security ecosystem. This technical role is responsible for identifying, analysing and mitigating sophisticated security threats while maturing SOC processes, tools and detection capabilities.

Key responsibilities

• Lead investigation and response to complex security incidents on endpoints, networks and cloud platforms.
• Act as escalation point for Level 1 and Level 2 SOC analysts.
• Perform advanced threat hunting using SIEM, NDR, XDR and EDR platforms.
• Develop, optimise and maintain detection rules, alerts, dashboards and use‑cases to reduce false positives.
• Correlate data from multiple security tools to uncover multi‑stage attacks.
• Support containment, eradication and recovery activities in collaboration with IT teams.
• Contribute to SOC runbooks, playbooks and incident response procedures.
• Provide post‑incident analysis, root‑cause assessments and improvement recommendations.

Required profile

• University degree in Computer Science, Information Technology, Electronic Engineering or Information Security.
• 3+ years experience in cyber security operations, incident response or threat detection.
• Practical knowledge of SIEM platforms (e.g., Splunk, Sentinel, QRadar, Elastic).
• Experience with EDR/XDR solutions (e.g., CrowdStrike, Defender, Palo Alto).
• Familiarity with Network Detection & Response (NDR) and network traffic analysis.

Required skills

• SIEM, EDR/XDR, NDR tooling.
• Threat hunting and incident investigation.
• Knowledge of MITRE ATT&CK, NIST or SANS frameworks.
• Understanding of TCP/IP, DNS, HTTP/HTTPS and typical banking system architectures.
• Log analysis from endpoints, firewalls, proxies, identity systems and cloud platforms.