Position: Middle SOC Analyst
Company: A-HR
Experience required: 3y
English level: intermediate

If you are in: Kazakhstan, Georgia, Armenia, Poland, Bulgaria, Argentina, Colombia, Uruguay

Our client is a global software engineering firm. With over 20 years of experience, teams of highly-trained engineers around the world, deep industry sector knowledge, and ongoing technology research, we help clients create custom software that improves their operations and opens new markets. Started out as a company of friends and has a special culture that distinguishes it from other IT outsourcers, such as:

- Flat structure. There are no “bosses” and “subordinates.”

- We hire people not to a project, but to the company. If the project (or your work in it) is over, you go to another project or to a paid “Idle.”

- Flexible schedule, ability to change projects, to work from home, to try yourself in different roles.

- Minimal bureaucracy and micromanagement, convenient corporate services.

Responsibilities:

Manage the full lifecycle of security incidents
Improve incident management processes
Investigate alerts generated by different security tools
Automate the processes of alerts investigation, processing, remediation, containment, and recovery, as well as incident management processes
Coordinate remediation activities and recovery operations upon security incidents
Optimize and improve the SIEM alerts logic, automation rules, playbooks, and processes
Perform threat hunting, threat intelligence, and purple team activities
Help create and maintain a comprehensive internal knowledge base used by the InfoSec team
Other InfoSec tasks

Must have:

In-depth understanding of networks and how operating systems function
Experience with ATP, EDR, XDR, CASB, UEBA, WAF, UTM, and SIEM systems
Understanding of exploitation, threat infection, and compromise methods and ability to apply them to the current infrastructure and translate them into business risks
Experience with cyber forensics, security alerts investigation, and incidents management
Experience with team-based work tools such as MS Teams, JIRA, Confluence, etc.
Fast learner
A Bachelor’s degree
Excellent communication skills
Good spoken English

Would be a plus:

Experience with Python and KQL (Kusto Query Language)
Experience with Microsoft and Fortinet security products
Pentest experience and InfoSec certifications are preferred
Stress-resistance, creativity