SOC Analyst

Andersen

КомпанияAndersen
СтранаЭстония
АдресEstonia

Описание

Andersen is hiring a SOC Analyst for a project providing cybersecurity services, monitoring security threats, and protecting critical systems in a complex international environment.

Обязанности

Investigating alerts escalated from L1/L2 across endpoint, network, email and identity.
Deciding whether alerts are true incidents, assess scope and escalate confirmed incidents to Incident Response.
Investigating email and identitying threats in Microsoft 365 and Entra ID (phishing, suspicious sign-ins, account compromise).
Proposing detection tuning and new use cases to the SIEM team, based on investigation findings.
Writing detailed case notes and periodic reports.
Taking part in shifts and on-call rotation as defined in the request.

Будет плюсом

Certifications: CySA+, SC-200, BTL1/BTL2, GCIH.
Threat hunting experience.
MSSP or multi-tenant SOC experience.
SOAR…

Требования

Experience in cybersecurity for 4+ years, including 1-2 years in a SOC at Tier 2 level.
Hands-on work with at least one major SIEM (Microsoft Sentinel, Splunk, QRadar or Elastic) and at least one EDR/XDR tool.
Investigation skills across endpoint, network, email and identity (including Microsoft 365 and Entra ID).
Writing queries in KQL, SPL or equivalent.
Working knowledge of MITRE ATT&CK and common attack techniques.
Readiness for shift work and on-call rotation.
Clean record, ready for background verification.
Level of English – from Upper-Intermediate and above.

Вакансия на сайте компании

Откликнуться в JobToo

SOC Analyst

Описание

Обязанности

Требования

Вакансии этой компании

Похожие вакансии