Full-Time SOC Analyst (Triage Specialist)

About you: You are someone who wants to influence your own development. You’re looking for a company where you have the opportunity to pursue your interests and be able to grow professionally. The SOC Analyst is a pivotal member of the Security Operations Center, acting as the first line of defense against cyber threats. The analyst is primarily responsible for triaging and analyzing raw security data, reviewing alarms and alerts, and determining their criticality.

Responsibilities:

1. Continuously monitor and collect raw security data from various platforms.
2. Review alarms and alerts, validate their accuracy, and enrich them with relevant data, including Indicators of Compromise (IoCs) and threat intelligence feeds.
3. Leverage tools such as SIEM platforms (e.g., Chronicle, Splunk, IBM QRadar, FortiSIEM), EDR/XDR solutions (e.g., Trellix, CrowdStrike, SentinelOne, FortiXDR), and SOAR platforms (e.g., Chronicle, FortiSOAR, Splunk SOAR) to identify, analyze, and correlate security events.
4. Identify high-risk events and potential incidents, prioritizing them based on criticality and organizational impact.
5. Conduct initial investigations to categorize alerts, escalating unresolved or complex issues to the appropriate teams.
6. Collaborate with stakeholders to ensure effective communication of incident details and risk assessments.
7. Assist in managing, configuring, and optimizing security monitoring tools to improve detection capabilities and reduce noise.
8. Support fine-tuning of detection rules and analytics to adapt to evolving threats.
9. Maintain detailed and accurate records of incidents, including analysis findings and actions taken, in ticketing systems.
10. Generate regular reports highlighting trends, high-risk events, and recommendations for process improvements.

Required Skills & Competencies:

• Bachelor’s degree in Information Technology, Computer Science, Cybersecurity, or a related discipline, or equivalent professional experience.
• At least 1 year of hands-on experience in a SOC role.
• Proven experience in working with SIEM and EDR/XDR solutions.
• Proven ability to perform incident triage and distinguish between false positives and actionable threats.
• Basic knowledge of network protocols (TCP/IP, DNS, HTTP/S) and operating systems (Windows, Linux).
• Strong analytical and critical thinking skills.
• Excellent communication skills, both verbal and written.
• Ability to work independently and under pressure while maintaining attention to detail.
• Advanced English (required).
• Desirable: CompTIA Security+
• Desirable: Certified SOC Analyst (CSA)
• Desirable: EC-Council Certified Incident Handler (ECIH)

What is the last date for applying to the job?

Which countries are accepted for this remote job?