SOC analyst L2

Pay in the destination countries

Monthly, in US dollars. Each country is an Imora admission package — open one for that route's fees, language requirement and deadline.

What does the day look like?

About 45% of your day is spent analyzing logs, tuning false positives, updating playbooks, and writing documentation. Around 25% is dedicated to deep forensic investigations and proactive threat hunting across endpoints and network telemetry. The remaining 20% goes to ticket updates, coordination meetings with IT teams, and handovers, while 10% is spent reviewing CVE vulnerability disclosures and threat intelligence. You use tools like Splunk Enterprise Security, Microsoft Sentinel, Elastic Security, IBM QRadar, Palo Alto Networks Cortex XDR, CrowdStrike Falcon, Wireshark, Zeek, Volatility, FTK Imager, Velociraptor, and CyberChef.

Unlike Tier 1 triage staff who work strict 24/7/365 shift rotations including 12-hour night shifts, Tier 2 analysts typically work standard business hours of 8 to 9 hours per day and 40 to 45 hours per week. However, roles frequently require an on-call rotation of 1 week every 4 to 6 weeks for high-severity incidents.

Where does this lead?