Security Operations Center Analyst
7 giorni fa
Modena, Emilia-Romagna, Italia
Qubika
Tempo pieno
Gratuito con email o Google
Salva questo lavoro e mantieni la tua ricerca organizzata
Crea un account gratuito per salvare lavori, creare avvisi e tornare a questa inserzione dalla tua dashboard.
Gratuito con email o Google
Continuando accetti i nostri Termini & Informativa sulla privacy.
We are looking for a highly motivated SOC Analyst to join our Security Operations Center team. As a frontline defender, you will be responsible for monitoring and analyzing security events to identify potential threats and support incident response.
Key Responsibilities
• Monitor security alerts and events from various sources (e.g., SIEM, EDR, firewalls, cloud platforms).
• Perform triage and investigation of potential security incidents.
• Escalate confirmed or suspicious incidents.
• Document findings and maintain accurate logs of investigations and outcomes.
• Support incident response efforts by gathering relevant logs and context.
• Monitor cloud and on-prem environments for unusual behavior or policy violations.
• Assist in tuning detection rules and updating incident response documentation.
• Participate in daily SOC briefings and shift handovers.
• Follow standard operating procedures (SOPs) and adhere to escalation protocols.
Requirements:
• 5+ years of experience in a SOC team.
• Basic understanding of networking, operating systems (Windows/Linux), and cybersecurity principles.
• Familiarity with tools such as EDR solutions and ticketing systems.
• Strong analytical thinking and attention to detail.
• Experience with SIEM Sentinel
• Familiar with analyzing incidents on Windows OS.
• Good written and verbal communication skills in English.
• Knowledge of MITRE ATT&CK framework and common attack techniques.
• Demonstrated practical use of AI/LLM tools (Claude, ChatGPT, Copilot, or equivalent) to accelerate engineering work: query and script generation, automation development, technical documentation, and triage support. Evaluates AI-generated output critically rather than accepting it at face value. Nice to Have:
• Security certifications such as CompTIA Security+, Microsoft SC-200, or similar.
Key Responsibilities
• Monitor security alerts and events from various sources (e.g., SIEM, EDR, firewalls, cloud platforms).
• Perform triage and investigation of potential security incidents.
• Escalate confirmed or suspicious incidents.
• Document findings and maintain accurate logs of investigations and outcomes.
• Support incident response efforts by gathering relevant logs and context.
• Monitor cloud and on-prem environments for unusual behavior or policy violations.
• Assist in tuning detection rules and updating incident response documentation.
• Participate in daily SOC briefings and shift handovers.
• Follow standard operating procedures (SOPs) and adhere to escalation protocols.
Requirements:
• 5+ years of experience in a SOC team.
• Basic understanding of networking, operating systems (Windows/Linux), and cybersecurity principles.
• Familiarity with tools such as EDR solutions and ticketing systems.
• Strong analytical thinking and attention to detail.
• Experience with SIEM Sentinel
• Familiar with analyzing incidents on Windows OS.
• Good written and verbal communication skills in English.
• Knowledge of MITRE ATT&CK framework and common attack techniques.
• Demonstrated practical use of AI/LLM tools (Claude, ChatGPT, Copilot, or equivalent) to accelerate engineering work: query and script generation, automation development, technical documentation, and triage support. Evaluates AI-generated output critically rather than accepting it at face value. Nice to Have:
• Security certifications such as CompTIA Security+, Microsoft SC-200, or similar.