About the Role
A Cybersecurity organization is seeking a Security Operations Center (SOC) Analyst to provide front-line monitoring, investigation, and response across the firm's global environment. The role is intended for a technical professional with foundational cybersecurity knowledge and practical experience in security operations, IT operations, infrastructure support, networking, systems administration, or a related discipline.
Responsibilities
•Monitor and triage endpoint, identity, cloud, network, email, and application security alerts.
•Correlate logs and evidence across multiple tools to determine scope, severity, and likely impact.
•Independently investigate routine events and escalate significant or ambiguous activity with clear findings.
•Maintain accurate case notes, timelines, evidence, and incident records.
•Execute approved playbooks and support containment, remediation, recovery, and post-incident review activities.
•Investigate phishing, credential misuse, malware, account takeover, privileged-access, and insider-risk scenarios.
•Identify affected users, systems, identities, applications, and data sources.
•Analyze suspicious authentication, Microsoft Entra ID, Active Directory, multi-factor authentication, and privileged-access activity.
•Investigate user-reported phishing and coordinate remediation and follow-up.
•Analyze endpoint detections and response alerts and security events across Microsoft 365, cloud, and SaaS platforms.
•Use approved AI-assisted tools to help investigate, summarize evidence, and improve analyst efficiency.
•Create or modify basic PowerShell, Python, or similar scripts to reduce repetitive work.
•Improve runbooks, knowledge articles, detections, and processes by identifying false positives and coverage gaps.
Requirements
•Bachelor's degree in Cybersecurity, Computer Science, Information Systems, Information Technology, Engineering, or a related field, or equivalent practical experience.
•One to three years of relevant experience in a SOC, incident response, information security, NOC, systems administration, infrastructure operations, cloud operations, or Tier 2+ technical support role.
•Experience with security monitoring, log analysis, alert triage, or a Security Information and Event Management (SIEM) platform.
•Working knowledge of Microsoft 365, Microsoft Entra ID, Active Directory, Windows, basic Linux administration, and networking fundamentals including DNS, TCP/IP, VPN, and firewalls.
•Understanding of common attack techniques, including phishing, credential theft, malware, privilege escalation, lateral movement, and account compromise.
•Familiarity with the MITRE ATT&CK framework and basic PowerShell, Python, or comparable scripting.
•Strong troubleshooting, analytical, documentation, organizational, and communication skills; able to remain effective during time-sensitive incidents.
Nice to Have
•Prior experience as a SOC or NOC analyst, system administrator, infrastructure engineer, Tier 2/3 support professional, or military cyber specialist.
•Experience in financial services or another regulated industry.
•Hands-on exposure to Microsoft Sentinel, Microsoft Defender XDR, CrowdStrike, Splunk, Proofpoint, SailPoint, Palo Alto Networks, Rapid7, or ServiceNow Security Operations.
•Experience using approved large language model or AI-assisted tools for investigation, analysis, documentation, or automation.
•CompTIA Security+; Microsoft SC-900: Security, Compliance, and Identity Fundamentals; CompTIA CySA+; (ISC)² SSCP; GIAC GSEC or GCIH.
Conditions
•Flexible work setup: remote or a hybrid model.
•Health insurance coverage.
•50% coverage of health insurance for spouses and children.
•24 days of paid vacation.
•10 days of paid sick leave.
•50% reimbursement for professional training, education, conferences.
•Work alongside a highly professional team.
•Engaging teambuilding events and activities.
•Flight tickets and accommodation rent for the 1st month for a relocated employee and his/her official family.
•Visa sponsorship, including support with the visa application process, entry permits, and residence permits.
