Can you give example bullets for a SOC analyst resume?

Yes. SOC bullets should show alert volume, investigation depth, tools and improvements you made to detection or response.

Examples (fictional, adapt to your work):

• "Monitored and triaged about 150 alerts per shift in Microsoft Sentinel, escalating confirmed incidents within the team's response targets."
• "Investigated a credential-phishing campaign, identified 23 affected mailboxes and coordinated password resets and mail purges with IT."
• "Wrote KQL detection rules for suspicious OAuth app consents, mapped to MITRE ATT&CK techniques."
• "Tuned 15 noisy Splunk correlation searches, reducing false positives so analysts could focus on real threats."

Keep incident details general. Never name affected clients or reveal weaknesses that are not fixed. If you worked in a managed security service provider, you can describe the client mix instead, such as "monitored 12 client environments in banking and retail". Mention your shift pattern and tier level in the job line, because SOC managers often hire for a specific tier.