SOC Analyst Trainer

Job Description:Job Title: SOC Analyst TrainerLocation: Shankhamul, KathmanduWorking Hours: 6:30 PM – 8:30 PM (Part-Time, Onsite)About the role:We're hiring a SOC Analyst Trainer to guide aspiring analysts through cybersecurity fundamentals, networking, Linux/Windows systems, SIEM tools (Wazuh), and real-world incident response.Key Responsibilities:Monitor SIEM dashboards and triage alerts (true positive / false positive / benign).Analyze logs (Windows Event Logs, Sysmon, Linux auth.log/syslog) and network traffic (Wireshark) for signs of compromise.Investigate suspicious logins, brute-force attempts, privileged account misuse, and malware indicators.Map attacker activity to the MITRE ATT&CK framework (recon, initial access, persistence, lateral movement, exfiltration).Write and tune SIEM detection rules to reduce false positives (e.g., using wazuh-logtest).Support incident response: validation, containment, evidence preservation, and reporting.Maintain documentation and follow SOC playbooks/SOPs within ethical and legal boundaries.Required Qualifications:Solid grasp of core cybersecurity concepts (CIA triad, risk, attack lifecycle).Networking fundamentals: TCP/IP, DNS, HTTP/HTTPS, SSH, RDP.Hands-on Linux and Windows/AD experience (permissions, logs, PowerShell, Kerberos/NTLM basics).Familiarity with a SIEM (Wazuh, Splunk, ELK, or similar).Understanding of common attack techniques and the MITRE ATT&CK framework.Basic scripting/CLI skills (Bash or PowerShell) for log analysis.Strong analytical skills and clear written communication for reporting.Preferred Qualifications:Experience building or working in a SOC lab (Wazuh server/indexer/dashboard).Experience writing/tuning custom detection rules.Certifications such as Security+, CySA+, BTL1 , +CEH , or equivalent.