Security Operations Analyst – Cyber Defense

About the role

Join a global Cybersecurity Operations team within a 24/7 Security Operations Centre (SOC). You will monitor, detect, investigate and respond to cyber threats across enterprise, cloud, network and endpoint environments for an international organization.

Key responsibilities

• Monitor, triage and investigate security alerts using SIEM, EDR, Microsoft security tools and cloud platforms.
• Analyze host and network logs from Windows, Linux, databases, applications, firewalls and NIDS/HIDS.
• Support incident response, remediation and recovery activities and work closely with Incident Response teams.
• Identify opportunities to improve detection quality, reduce false positives and tune security monitoring.

Required profile

• 5+ years of experience in IT/cybersecurity, including security alert triage and incident support.
• Hands‑on experience working in a SOC environment.
• Fluent English with strong written and verbal communication skills.

Required skills

• SIEM platforms (e.g., Splunk, QRadar, ArcSight, Microsoft Sentinel, ELK).
• EDR solutions (Microsoft Defender for Endpoint, CrowdStrike).
• Microsoft security technologies (Sentinel, Defender).
• Cloud security on Azure, AWS and/or GCP.
• Log analysis on Windows, Linux, macOS, databases and network devices.
• Scripting languages such as Python, PowerShell, Bash or Ruby.
• Network monitoring protocols (TCP/IP, syslog, firewall logs, NIDS/HIDS).

What we offer

• Work inside a global 24/7 cybersecurity operation protecting international organizations.
• Exposure to large‑scale cloud, SIEM, EDR, network and endpoint security environments.
• Collaboration with cybersecurity specialists across multiple regions and disciplines.
• Hands‑on experience with real‑world threat detection and incident response.