SOC Analyst Resume Example

Professional Summary

SOC analyst with 3+ years in 24/7 security operations environments monitoring enterprise networks and endpoints. Skilled in real-time threat detection using Splunk and CrowdStrike, with experience in alert triage, incident escalation, and developing detection use cases for emerging threats.

Key Skills

What to Include on a SOC Analyst Resume

• A concise summary that states your soc analyst experience level, strongest domain, and the business problems you solve.
• A skills section that mirrors the job description language for Splunk, CrowdStrike Falcon, Microsoft Sentinel, Incident Triage.
• Experience bullets that connect SOC analyst, security operations, threat detection to measurable outcomes such as cost savings, faster delivery, better quality, or improved customer results.
• Tools, platforms, certifications, and methods that are current for cybersecurity roles.
• Recent projects that show ownership, cross-functional work, and a clear result instead of generic responsibilities.

Sample Experience Bullets

• Triaged over 300 daily security alerts across Splunk and CrowdStrike Falcon, maintaining a response time under 15 minutes for all high-severity incidents. Documented triage decisions and escalation rationale in ServiceNow for every alert acted on
• Wrote 25+ threat hunting queries based on MITRE ATT&CK techniques targeting credential access, lateral movement, and persistence. Proactively identified 8 indicators of compromise that had been present in the environment undetected
• Built automated response playbooks in Cortex XSOAR for phishing and malware alerts, cutting average response time from 30 minutes to 5 minutes. The playbooks handle initial enrichment, containment, and ticket creation without analyst intervention
• Investigated and contained a business email compromise attempt targeting the finance department, tracing the attack chain from initial phishing email through account takeover. Prevented $250K in fraudulent wire transfers by catching it before the second approval
• Mentored 3 Tier-1 analysts on alert triage methodology, tool usage, and escalation criteria through daily shadowing and weekly review sessions. The team's first-call resolution rate improved 35% within two months of the mentorship starting
• Worked the overnight and weekend shift rotation in a 24/7 SOC covering enterprise network, endpoint, and cloud environments independently. Handled alert volume and incident escalations without senior analyst backup during off-hours
• Analyzed network traffic captures in Wireshark and correlated endpoint telemetry from CrowdStrike to investigate potential data exfiltration and lateral movement activity. Built investigation timelines that the incident response team used for containment decisions
• Maintained detailed shift notes and handed off all open investigations to the incoming shift with clear context, next steps, and priority rankings. This handoff discipline kept investigation continuity high across analyst rotations
• Tuned 15 SIEM correlation rules to reduce alert noise by adjusting thresholds, adding exclusion lists, and refining detection logic. False positive alerts dropped from roughly 200 to 60 per day, freeing significant analyst time for real investigations
• Created a daily security dashboard in Splunk showing alert volume trends, mean triage time, and escalation rates broken down by category. The SOC manager used this dashboard in weekly team meetings to track operational performance
• Participated in quarterly incident response tabletop exercises simulating ransomware, insider threat, and cloud compromise scenarios. Provided feedback on playbook gaps after each exercise and helped update the documentation accordingly

ATS Keywords for SOC Analyst Resumes

Use these terms naturally where they match your experience and the job description.

Recommended Certifications

• CompTIA Security+
• CompTIA CySA+
• Splunk Core Certified User

What Does a SOC Analyst Do?

• Design, develop, and maintain software solutions using Splunk, CrowdStrike Falcon, Microsoft Sentinel and related technologies
• Collaborate with cross-functional teams including product managers, designers, and QA engineers to deliver features on schedule
• Write clean, well-tested code following industry best practices for SOC analyst and security operations
• Participate in code reviews, technical discussions, and architecture decisions to improve system quality and team knowledge
• Troubleshoot production issues, optimize performance, and ensure system reliability across all environments

Resume Tips for SOC Analysts