SOC Analyst with 4 years of experience in incident response and threat detection — AMA

Hey r/cybersecurity,

I've been working as a SOC Analyst for about 4 years, currently at a mid-size fintech company. My day-to-day involves triaging alerts, threat hunting across our SIEM, and building/tuning detection rules in Splunk.

Some background:

Certifications: Security+, currently studying for OSCP

I got into the field after starting out in IT helpdesk, then moved into a junior SOC role

I've worked on a couple of real incident response cases, including a phishing-driven account compromise that turned into a broader investigation

Happy to answer questions about breaking into the field, day-to-day SOC work, certifications worth pursuing, tools I actually use vs. what's overhyped, or general career advice.