SOC Analyst

Job Description & Summary

About the Team

For us, a SOC is not just a ticket or detection "washing machine." Our understanding of a SOC includes monitoring and event detection and analysis, investigation of incidents and their remediation, and post-incident activities. We deliver services to our clients that consist of an analytic approach utilizing Security Information and Event Management (SIEM) systems, together with Endpoint Detection and Response (EDR/XDR) tools, as well as other technologies and tools that allow us to provide comprehensive services.

About your Manager

Ivana has over 7 years of experience across different IT fields and a focus on Cybersecurity for the last 5 years. Ivana is known for being a supportive team player. She is committed to nurturing the growth and development of each team member, ensuring they reach their full potential. Their collaborative approach and dedication to professional development inspire a thriving and innovative work environment. In her free time, Ivana is a sporty person, she likes running, swimming, triathlons and all kinds of endurance sport races.

Job Description & Summary

SOC Analyst is primarily responsible to identify and analyze threats in the clients environment, leveraging Security Information and Event Management (SIEM) & Endpoint Detection & Response (EDR) tools, performing log analysis and investigation to reach conclusions based on evidence with high degree of confidence. Further responsibilities cover the continuous improvement through service development, guidelines and procedures update as well as the contribution to larger cross-disciplinary projects for major clients.

We provide an opportunity to grow in the Cyber Security field - whether your desire is to be the go-to SOC Architect, Digital Forensics & Incident Response (DFIR) expert, Threat Hunter, Cyber Threat Intelligence professional, this is the team to be. With clients coming from Czech Republic as well as from the wider EMEA region, you will have the opportunity to grow your technical expertise or consulting skills (or both) of a lifetime.

Requirements of the Role

• Minimum 1 year of relevant professional experience

• Consistent, reliable and professional personality, capable of working within international & diverse teams

• Previous SOC/CERT/CSIRT (or equivalent) experience highly desired

• Hands-on skills within the information security field, with special focus towards system & log analysis or network & OS (Windows, Linux) administration

Nice to have

• Working knowledge of the Security Information and Event Management (SIEM) and Endpoint Detection and Response (EDR) tools like Microsoft Sentinel, Defender, Tanium, QRadar, FireEye