Security Analyst (Tier 1/2/3 SOC).

A Security Analyst works inside a Security Operations Center (SOC) to detect, triage, and respond to potential security incidents. Tier 1 analysts watch SIEM, EDR, and XDR queues, validate alerts against playbooks, and escalate true positives; Tier 2 analysts perform deeper investigation, correlate events across tools, contain affected hosts, and own incident tickets; Tier 3 analysts handle advanced incidents, conduct threat hunting, build detections, and tune the SIEM. Reporting is usually to a SOC manager who in turn reports to a Director of Security Operations or the CISO. Common qualifications include a bachelor's degree, hands-on experience with SIEM/EDR platforms, and certifications such as Security+, BTL1, GCIA, GCIH, or CySA+.