We are looking for a
Security Operations (SOC) Analyst
to strengthen security monitoring, incident response, and detection engineering across a SOC environment. You will triage alerts, hunt threats, improve SOC/SOAR workflows, and communicate findings through clear reporting—apply now to help raise our security posture.
Respond to security incidents and coordinate appropriate containment and remediation actions Triage, investigate, and prioritize security alerts across the SOC toolset Develop and tune rule sets and use cases to improve detection quality and reduce false positives Hunt for threats and support threat intelligence processes, including mapping to TTPs Use advanced analytic tools to identify emerging threat patterns and vulnerabilities Improve SOC/SOAR tooling, workflows, and automation to raise efficiency and coverage Generate clear reports for various stakeholders and communicate findings effectively Plan and run SOC tabletop exercises to validate readiness and response procedures Participate in the on-call rotation every 8th weekend 2+ years of experience in Security Operation Center (SOC)
operations and security monitoring 2+ years of experience with SIEM and endpoint security tools such as Splunk and Microsoft Defender Strong incident response skills and alert triage capability Solid use case development skills for rule sets and detection logic Good knowledge of malware detection and intrusion detection and prevention systems (IDPS) Strong understanding of Windows, Linux, database, and network device monitoring and logging techniques Good understanding of host and network security hardening, networking protocols, common intrusion techniques, and risk management concepts Strong analytical skills to identify emerging threat patterns and vulnerabilities using advanced analytics High attention to detail and strong logical thinking Curious mindset and confidence to ask questions when needed Upper-Intermediate English proficiency (B2) Availability for on-call duty every 8th weekend Tanium experience or exposure to asset management, patch management, and EDR solutions Qualys experience Azure Sentinel experience AWS security experience ServiceNow SecOps experience