L3 SOC ANALYST

Inchcape Américas; Colombia; Hybrid; COP 100,440,000 - 167,400,000; Full time

Benefits offered by this job

Hybrid/Remote work options

Remote work bonus

Health coverage

Job summary

Inchcape Américas is seeking a senior L3 SOC Analyst to lead investigations and responses to complex cybersecurity incidents within our global security operations center. You will drive improvements in threat detection, incident response, threat hunting, and security automation while mentoring junior analysts.

The role emphasizes hands-on expertise in SIEM/EDR/SOAR, cloud and network security, and strong communication with technical and non-technical stakeholders.

Qualifications

• 5+ years hands-on SOC experience including senior-level roles in Incident Response, Threat Hunting, or Detection Engineering.
• Deep expertise in SIEM, EDR, SOAR, Cloud Security, Identity Security, Endpoint Security, Email Security, and enterprise monitoring platforms.
• Proven experience leading investigations and responses to major cybersecurity incidents in complex environments.
• Strong detection engineering skills including creating, tuning, and optimizing detection rules and analytics.

Responsibilities

• Lead investigation and response to complex, high-severity cybersecurity incidents as the senior technical escalation point in the SOC.
• Coordinate containment, eradication, and recovery activities during major security incidents with internal/external stakeholders.
• Develop and improve detection rules, threat models, and monitoring across SIEM, EDR, cloud, identity, network, and endpoint platforms.
• Perform proactive threat hunting to identify advanced threats and monitoring gaps.
• Build and optimize SOAR playbooks, automations, and integrations to speed incident response.
• Conduct deep technical investigations to determine attack paths, root causes, and business impact across enterprise environments.
• Mentor junior SOC analysts (L1/L2) and contribute to SOC strategy and on-call escalations.

Skills

SOC experience

Incident Response

Threat Hunting

Detection Engineering

SIEM

EDR

SOAR

Cloud Security

Identity Security

Network Security

Leadership

Mentoring

Tools

SIEM

EDR

SOAR

Job description

Are you looking to accelerate your career path in a stimulating, fast-growing business? At Inchcape, we’re pursuing an exciting strategy to evolve our global business and lead our industry’s transformation.

Join Inchcape Digital, part of Inchcape global network. You’ll explore and develop cutting-edge technology and data solutions that are driving our innovation and unique market position. Thrive as part of a highly collaborative and supportive team of diverse and talented colleagues.

Our Security platform is seeking a L3 SOC ANALYST to join our team. This role will lead the investigation and response to complex cybersecurity incidents, act as the highest technical escalation point, and drive improvements across threat detection, incident response, threat hunting, and security automation. The ideal candidate will have strong expertise in SIEM, EDR, cloud and network security, along with hands‑on experience developing detection rules, SOAR workflows, and proactive threat‑hunting initiatives in a mature SOC environment. Strong technical leadership, problem‑solving skills, and a passion for advancing cybersecurity operations are essential for success in this role.

What you'll do

• Lead the investigation and response to complex and high‑severity cybersecurity incidents, acting as the senior technical escalation point within the SOC.
• Coordinate containment, eradication, and recovery activities during major security incidents while collaborating with internal and external stakeholders.
• Develop and enhance detection rules, threat models, and monitoring capabilities across SIEM, EDR, cloud, identity, network, and endpoint security platforms.
• Perform proactive threat hunting to identify advanced threats, detection gaps, and opportunities to strengthen security monitoring.
• Build and optimize SOAR playbooks, automations, and integrations to improve efficiency and accelerate incident response.
• Conduct deep technical investigations to determine attack paths, root causes, and business impact across enterprise environments.
• Mentor junior SOC analysts (L1/L2), contribute to SOC strategy and continuous improvement initiatives, and participate in on‑call escalations when required.

About You

• 5+ years of hands‑on SOC experience, including senior‑level work in Incident Response, Threat Hunting, or Detection Engineering.
• Deep expertise in SIEM, EDR, SOAR, Cloud Security, Identity Security, Endpoint Security, Email Security, and enterprise monitoring platforms.
• Proven experience leading the investigation and response to major cybersecurity incidents in complex environments.
• Strong detection engineering skills, including creating, tuning, and optimizing detection rules, behavioral analytics, and monitoring content.
• Practical experience with threat hunting methodologies, threat intelligence, and frameworks such as MITRE ATT&CK.
• Strong knowledge of operating systems, networking, Active Directory, Entra ID, cloud technologies, authentication protocols, and enterprise infrastructure.
• Excellent communication and leadership skills, with the ability to mentor analysts, manage high‑pressure incidents, and clearly communicate technical findings to both technical and non‑technical stakeholders.

We offer you

• Learning & Development: Access leading learning platforms with tailored pathways for every role, including technical and leadership training and certifications.
• Career Growth: Receive ongoing career support, regular performance reviews, and opportunities for promotion, with access to senior leadership for guidance and mentorship.
• Skills Advancement: Continuously upgrade your expertise through training in the latest technologies and industry advancements.
• Flexible Work: Benefit from hybrid or remote work arrangements, with a remote work bonus to recognise your contribution.
• Health & Wellbeing: Enjoy Health Maintenance Organization HMO coverage with free dependent inclusion and life insurance for added peace of mind.
• Special Leave: Celebrate your birthday with a dedicated day off just for you.
• Work Tools: Get the equipment you need to perform your role effectively.

Opportunity for everyone

At Inchcape, inclusion accelerates our success. We are committed to creating a workplace where everyone feels valued, heard, and empowered to thrive. We foster an inclusive culture that reflects the communities we serve, ensuring opportunitiesfor all.

About us

Our diverse global team of over 16,000 talented colleagues foster an inclusive and collaborative culture, delivering a brilliant experience for our customers and partners. We’re a dynamic and fast-growing business, driving the transformation of our industry and redefining tomorrow. Find out more www.inchcape.comInchcape’s Digital Delivery Centres drive innovation, empowering global mobility through advanced technology solutions. Our teams deliver impactful digital systems, ensuring long‑term business success with world‑class operations at scale. Learn more about us here.

Additional information request

Selected candidates will be contacted to initiate our hiring journey. We may request additional information from applicants to better understand your background, qualifications and experience for the role.