SOC Analyst (m/w/d)
Core
Analyze and investigate escalated security alarms and incidents from SIEM, EDR, and network systems to detect, contain, and respond to cyber threats.
Role type
SOC Analyst (Cyber Security Analyst)
Builds
Detection rules, playbooks, and incident response processes for client environments
Domain
Cybersecurity, Threat Intelligence
Required skills
SIEM analysis, EDR analysis, incident investigation, threat hunting, containment strategies, MITRE ATT&CK framework knowledge, scripting (KQL, PowerShell, Python), Windows/Linux administration, Active Directory, network protocols
Preferred skills
CTF experience, CompTIA CySA+, BTL1, Security+ certifications, SIEM/EDR tool experience
Technologies
SIEM, EDR, KQL, PowerShell, Python, Windows, Linux, Active Directory
Responsibilities
Analyze and evaluate escalated security alarms from SIEM, EDR, and network systems; Investigate security incidents, reconstruct events, and analyze attack paths; Implement containment and countermeasures; Develop and update detection rules and playbooks; Support 1st level support and share knowledge within the team