Position: SOC Analyst
Company: Perfectial
Experience required: 3y
English level: upper

The platform is used for planning trips, inspiration and sharing information about the travel experiences. Our aim is to build a useful and user-friendly product with a focus on high-quality code applying our best practices.

At Perfectial, we’re committed to our projects, customers, having fun and most importantly to each other’s success

If you have a solid professional background and get motivated by contributing to meaningful projects, we’d like to meet you.

**Requirements:**
2 + years of previous Security Operations Center Experience in conducting security investigations
Security monitoring experience with one or more SIEM technologies — Splunk or Azure Sentinel
Skills in digital investigations including: computer forensics, network forensics, malware analysis, and memory analysis
Strong understanding of security incident management, malware management and vulnerability management processes (Tenable IO)
Knowledge of EDR ( Crowdstrike or alternatives)
Excellent English- written and verbal skills
Being a self-starter, critical and strategic thinker, negotiator and consensus builder, work independently and adjust to changing priorities

**Will be a plus:**
Bachelor’s Degree / Diploma in a relevant area of study with a preference for Information Security, Computer Science or Computer Engineering
Information Security professional certifications such as CISSP, CISM, CISA, GSEC, CEH

**Responsibilities:**
Conduct information security investigations as a result of security incidents identified by the Level-1 security analysts who are monitoring the security consoles from various SOC entry channels (SIEM, Tickets, Email and Phone).
Provide analysis of Information Security Events received from Managed Security Service (MSS) Partners, Internal Tools, and Stakeholders; determine true or false positive; and execute appropriate response procedures.
Utilize intelligence to identify risk as well as execute best practices to mitigate or remediate those risks.
Develop tools and techniques to act as a red team member within our organization.
Provide guidance and oversight on incident resolution and containment techniques.
Conduct information security investigations as a result of security incidents identified by the Level 1 security analyst who are monitoring the security consoles from various SOC entry channels (SIEM, Tickets, Email and Phone), act as a point of escalation for Level-1 SOC security analysts in support of information security investigations to provide guidance and oversight on incident resolution and containment techniques.
Coordinate individual security incidents from inception to completion.
Execute red team activities to identify risks not found by existing security tools.
Define, create and maintain SIEM correlation rules, customer build documents, security processes and procedures. Follow ITIL practices regarding incident, problem and change management.
Assist in automating manual processes to improve efficiency and accuracy of investigations
Staying up-to-date with emerging security threats including applicable regulatory security requirements.
Document incidents from initial detection through final resolution.
Participate in security incident management and vulnerability management processes.
Assist with internal threat / unintended threat hunting/deception activities.
Coordinate with IT teams on escalations, tracking, performance issues, and outages.
Works as part of a team to ensure that corporate data and technology platform components are safeguarded from known threats.
Communicate effectively with customers, teammates, and management.
Provide recommendations in tuning and optimization of security systems, SOC security processes, procedures and policies.

**Our professionals value us for:**
Regular performance evaluation and salary revision, attractive benefits package;
Functional offices, centres of excellence, and mentorship from competence leads to support the professional growth;
Tech talks, open talks, and conferences; training and certifications;
Free English courses of all levels with attentive and friendly teachers;
Health insurance; maternity aid; corporate sports teams, hobby clubs, in-house gym or gym discounts;
Referral program, bonuses for marriage and childbirth;
Great team parties and corporate events; cool branded gifts; an additional paid day off for the Company Day celebration;
Warm and relaxed atmosphere, smooth and transparent communication, and unlimited fun.

Feel free to contact me, I will provide you with all the information you might be interested in.