As a SOC Analyst, you will be a front-line defender, monitoring and responding to security events while leveraging AI tools to enhance incident response and detection capabilities.
SOC Analyst L1/L2
📜 Description
- Monitor security alerts and events from SIEM, EDR, IDS/IPS, firewalls, and other security tools.
- Conduct threat hunting activities to identify potential risks proactively.
- Develop, tune, and maintain detection rules in SIEM and EDR platforms.
- Investigate and triage security incidents, escalating complex cases when needed.
- Perform root cause analysis and provide actionable recommendations.
- Collaborate with IT and cybersecurity teams to implement mitigation strategies.
🛠️ Requirements
- Solid experience in cybersecurity, with a focus on threat hunting.
- Proven experience defining rules for SIEM and EDR solutions.
- Familiarity with incident response, threat intelligence, and security best practices.
- Strong analytical and problem-solving skills.
- Good communication skills in English.
- Ability to work in a fast-paced, 24/7 operational environment (including shift work, if required).
✨ Benefits
- Employment Contract;
- Health Insurance;
- Hybrid work (Porto) - 4x per week at the office.
Full job description
Alongside partners with organizations to drive digital transformation and build high-performing tech teams.
We are looking for a SOC Analyst L1/L2 to join a project at a company specializing in the management of financial markets. The ideal candidate will have solid experience in cybersecurity, with a strong focus on threat hunting and defining rules for SIEM and EDR solutions. You will play a key role in detecting, investigating, and responding to security threats, helping to maintain and improve our organization’s security posture.
Responsibilities
- Monitor security alerts and events from SIEM, EDR, IDS/IPS, firewalls, and other security tools.
- Conduct threat hunting activities to identify potential risks proactively.
- Develop, tune, and maintain detection rules in SIEM and EDR platforms.
- Investigate and triage security incidents, escalating complex cases when needed.
- Perform root cause analysis and provide actionable recommendations.
- Collaborate with IT and cybersecurity teams to implement mitigation strategies.
- Document incidents, findings, and improvements to SOC processes and playbooks.
Requirements
- Solid experience in cybersecurity, with a focus on threat hunting.
- Proven experience defining rules for SIEM and EDR solutions.
- Familiarity with incident response, threat intelligence, and security best practices.
- Strong analytical and problem-solving skills.
- Good communication skills in English.
- Ability to work in a fast-paced, 24/7 operational environment (including shift work, if required).
Benefits
- Employment Contract;
- Health Insurance;
- Meal Card;
- Gym Ticket;
- Hybrid work (Porto) - 4x per week at the office.
Similar jobs
Search more Security Operations Analyst jobsSupport security operations across cloud and on-premise environments, improving protective tools, testing for vulnerabilities, coordinating remediation, and contributing to audits, risk management, and security awareness.
Mid-Senior Information Security Intelligence Analyst (Hybrid work)
As a Mid-Senior Information Security Intelligence Analyst, you will track cyber threats, analyze intrusions, and enhance Eurofins' security posture through intelligence and collaboration.
Analista de Segurança da Informação III - Foco em Operações de Segurança (WAF & AppSec)
The role involves managing and optimizing Web Application Firewall (WAF) solutions, ensuring application security, and responding to security incidents in a corporate environment.
As a SOC Analyst, you will protect BeyondTrust's infrastructure and customer products by monitoring, investigating, and responding to security events in a collaborative team environment.
