SOC Analyst (00:00–09:00 UTC)
About The Position
The SOC Analyst is responsible for continuously monitoring, triaging, and investigating security events across the organization as part of a global follow-the-sun Security Operations Center. Reporting to the SOC Lead, the role focuses on understanding alerts, investigating suspicious activity end to end, responding to real threats, and ensuring clear handovers between regions so that work continues seamlessly across shifts. The role suits an experienced analyst with a strong investigative mindset who can work accurately and independently in a fast-paced, fully remote environment. Hands-on engineering experience with core security platforms is a plus.
Requirements
- Bachelor's degree in Information Technology, Cybersecurity, Computer Science, or a related field, or equivalent practical experience.
- At least 3 years of hands-on experience as a SOC Analyst triaging alerts and investigating security incidents in a production environment.
- Solid working knowledge of EDR, SSE, SIEM, and WAF technologies and how to use them to investigate and respond to threats.
- Experience with incident response and threat hunting, ideally including familiarity with the MITRE ATT&CK framework.
- Excellent understanding of network security, endpoint security, cloud security, and Zero Trust principles.
- Strong analytical, troubleshooting, and problem-solving skills, with close attention to detail.
- Ability to handle sensitive information responsibly and securely.
- Good written and verbal English communication skills and ability to work effectively with technical and non-technical teams across time zones.
Nice To Haves
- Hands-on experience implementing, configuring, and tuning security platforms, or writing and tuning detection content.
- Relevant certifications such as Security+, CySA+, GCIA, GCIH, BTL1, or vendor-specific credentials.
Responsibilities
- Monitor, triage, and analyze security alerts and events from SIEM, EDR, SSE, and WAF platforms.
- Investigate security incidents from initial triage through analysis, containment, eradication, and post-incident documentation, coordinating with relevant teams.
- Determine the scope, severity, and impact of security events; distinguish true positives from false positives and escalate confirmed incidents according to defined procedures.
- Execute response actions using security platforms, such as isolating endpoints, blocking indicators, disabling compromised accounts, and enforcing access restrictions.
- Provide structured, high-quality shift handovers across regions so open investigations, incidents, and pending actions continue seamlessly.
- Proactively hunt for threats across endpoint, network, and log data, and map findings to frameworks such as MITRE ATT&CK.
- Provide feedback on detection quality and help tune SIEM correlation rules, EDR custom detections, and WAF rules to reduce noise and improve coverage.
- Enrich investigations with threat intelligence, including indicators of compromise, attacker techniques, and emerging campaigns relevant to the organization.
- Develop and maintain technical documentation, standard operating procedures, and incident response playbooks.
- Collaborate with IT, infrastructure, application, and security engineering teams to resolve incidents and support day-to-day operations.
- Support vulnerability management and drive continuous improvement of the organization's security posture.
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Mid Level
