Senior L3 SOC Analyst - Remote/Hybrid Incident Lead

Inchcape; Colombia; Hybride; COP 48 000 000 - 90 000 000; Plein temps

Avantages offerts par ce poste

Learning & Development

Career Growth

Skills Advancement

Flexible Work

Health & Wellbeing

Special Leave

Work Tools

Résumé du poste

Inchcape Digital seeks a skilled L3 SOC Analyst to join our security team. You’ll lead investigations, drive containment and recovery, and develop detection rules across SIEM, EDR, and cloud platforms.

The role emphasizes threat hunting, SOAR automation, and proactive security improvements in a mature SOC environment. You will mentor junior analysts, collaborate with internal and external stakeholders, and participate in on-call escalations as needed.

Qualifications

• 5+ years of hands-on SOC experience in Incident Response or Threat Hunting.
• Strong expertise in SIEM, EDR, SOAR and cloud/security monitoring.
• Experience leading investigations of major incidents in complex environments.
• Familiarity with MITRE ATT&CK framework and detection engineering.

Responsabilités

• Lead the investigation and response to complex and high-severity cybersecurity incidents.
• Coordinate containment, eradication, and recovery activities during major security incidents.
• Develop and enhance detection rules, threat models, and monitoring capabilities.
• Perform proactive threat hunting to identify advanced threats and gaps.
• Build and optimize SOAR playbooks, automations, and integrations.
• Conduct deep technical investigations to determine attack paths and impact.
• Mentor junior SOC analysts and participate in on-call escalations.

Connaissances

SIEM

EDR

SOAR

Cloud Security

Identity Security

Endpoint Security

Email Security

Enterprise monitoring

Outils

MITRE ATT&CK

Active Directory

Entra ID

Cloud technologies

Description du poste

Inchcape Digital seeks a skilled L3 SOC Analyst to join our security team. You’ll lead investigations, drive containment and recovery, and develop detection rules across SIEM, EDR, and cloud platforms.

The role emphasizes threat hunting, SOAR automation, and proactive security improvements in a mature SOC environment. You will mentor junior analysts, collaborate with internal and external stakeholders, and participate in on-call escalations as needed.