L3 SOC ANALYST

Inchcape; Bogotá; Hybrid; COP 90,000,000 - 140,000,000; Full time

Benefits offered by this job

Learning & Development

Career Growth

Flexible Work (Hybrid/Remote)

Health & Life Insurance

Birthday Leave

Work Tools Provided

Job summary

Inchcape is seeking a skilled L3 SOC Analyst to lead investigations and drive response to complex cybersecurity incidents in a hybrid Colombia environment. You will coordinate containment, eradication, and recovery, while expanding detection rules, threat models, and monitoring across SIEM/EDR/Cloud.

The role also includes proactive threat hunting, SOAR playbook development, and mentoring junior analysts. The ideal candidate brings 5+ years in SOC, deep SIEM/EDR/SOAR expertise, MITRE ATT&CK

Qualifications

• 5+ years of hands-on SOC experience in Incident Response, Threat Hunting, or Detection Engineering.
• Deep expertise in SIEM, EDR, SOAR, Cloud Security, Identity Security, Endpoint Security, Email Security, and enterprise monitoring platforms.
• Proven experience leading investigations in major cybersecurity incidents in complex environments.
• Strong detection engineering skills, including creating, tuning, and optimizing detection rules, behavioral analytics, and monitoring content.
• Knowledge of MITRE ATT&CK and enterprise security concepts.

Responsibilities

• Lead the investigation and response to complex and high-severity cybersecurity incidents, acting as the senior technical escalation point within the SOC.
• Coordinate containment, eradication, and recovery activities during major security incidents while collaborating with internal and external stakeholders.
• Develop and enhance detection rules, threat models, and monitoring capabilities across SIEM, EDR, cloud, identity, network, and endpoint security platforms.
• Perform proactive threat hunting to identify advanced threats, detection gaps, and opportunities to strengthen security monitoring.
• Build and optimize SOAR playbooks, automations, and integrations to improve efficiency and accelerate incident response.
• Conduct deep technical investigations to determine attack paths, root causes, and business impact across enterprise environments.
• Mentor junior SOC analysts (L1/L2), contribute to SOC strategy and continuous improvement initiatives, and participate in on-call escalations when required.

Skills

SIEM

EDR

SOAR

Threat Hunting

Incident Response

Cloud Security

Identity Security

Endpoint Security

Network Security

MITRE ATT&CK

Job description

# L3 SOC ANALYSTBack to job listing## L3 SOC ANALYST28 Oct 2026ColombiaDigital & TechnologyPermanent EmployeeApply nowShare this jobAre you looking to accelerate your career path in a stimulating, fast-growing business? At Inchcape, we’re pursuing an exciting strategy to evolve our global business and lead our industry’s transformation. Join**Inchcape Digita**l, part of Inchcape global network. You’ll explore and develop cutting-edge technology and data solutions that are driving our innovation and unique market position. Thrive as part of a highly collaborative and supportive team of diverse and talented colleagues. Our Security platform is seeking a L3 SOC ANALYST to join our team. This role will lead the investigation and response to complex cybersecurity incidents, act as the highest technical escalation point, and drive improvements across threat detection, incident response, threat hunting, and security automation. The ideal candidate will have strong expertise in SIEM, EDR, cloud and network security, along with hands-on experience developing detection rules, SOAR workflows, and proactive threat-hunting initiatives in a mature SOC environment. Strong technical leadership, problem-solving skills, and a passion for advancing cybersecurity operations are essential for success in this role.**What you'll do*** Lead the investigation and response to complex and high-severity cybersecurity incidents, acting as the senior technical escalation point within the SOC.* Coordinate containment, eradication, and recovery activities during major security incidents while collaborating with internal and external stakeholders.* Develop and enhance detection rules, threat models, and monitoring capabilities across SIEM, EDR, cloud, identity, network, and endpoint security platforms.* Perform proactive threat hunting to identify advanced threats, detection gaps, and opportunities to strengthen security monitoring.* Build and optimize SOAR playbooks, automations, and integrations to improve efficiency and accelerate incident response.* Conduct deep technical investigations to determine attack paths, root causes, and business impact across enterprise environments.* Mentor junior SOC analysts (L1/L2), contribute to SOC strategy and continuous improvement initiatives, and participate in on-call escalations when required.**About you*** 5+ years of hands-on SOC experience, including senior-level work in Incident Response, Threat Hunting, or Detection Engineering.* Deep expertise in SIEM, EDR, SOAR, Cloud Security, Identity Security, Endpoint Security, Email Security, and enterprise monitoring platforms.* Proven experience leading the investigation and response to major cybersecurity incidents in complex environments.* Strong detection engineering skills, including creating, tuning, and optimizing detection rules, behavioral analytics, and monitoring content.* Practical experience with threat hunting methodologies, threat intelligence, and frameworks such as MITRE ATT&CK.* Strong knowledge of operating systems, networking, Active Directory, Entra ID, cloud technologies, authentication protocols, and enterprise infrastructure.* Excellent communication and leadership skills, with the ability to mentor analysts, manage high-pressure incidents, and clearly communicate technical findings to both technical and non-technical stakeholders.**We offer you****Learning & Development**: Access leading learning platforms with tailored pathways for every role, including technical and leadership training and certifications. **Career Growth:**Receive ongoing career support, regular performance reviews, and opportunities for promotion, with access to senior leadership for guidance and mentorship**.****Skills Advancement**: Continuously upgrade your expertise through training in the latest technologies and industry advancements. **Flexible Work:** Benefit from hybrid or remote work arrangements, with a remote work bonus to recognise your contribution. **Health & Wellbeing:** Enjoy Health Maintenance Organization HMO coverage with free dependent inclusion and life insurance for added peace of mind. **Special Leave:** Celebrate your birthday with a dedicated day off just for you. **Work Tools:** Get the equipment you need to perform your role effectively. **Opportunity for everyone**At Inchcape, inclusion accelerates our success. We are committed to creating a workplace where everyone feels valued, heard, and empowered to thrive. We foster an inclusive culture that reflects the communities we serve, ensuring opportunitiesfor all. **About us** Our diverse global team of over 16,000 talented colleagues foster an inclusive and collaborative culture, delivering a brilliant experience for our customers and partners. We’re a dynamic and fast-growing business, driving the transformation of our industry and redefining tomorrow. Find out more www.inchcape.comInchcape’s Digital Delivery Centres drive innovation, empowering global mobility through advanced technology solutions. Our teams deliver impactful digital systems, ensuring long-term business success with world-class operations at scale. Learn more about us here. **Additional information request**Selected candidates will be contacted to initiate our hiring journey. We may request additional information from applicants to better understand your background, qualifications and experience for the role. Location: Colombia Work Mode: Hybrid (Bogota)