SOC Analyst - 24/7 Tierless Ops with Falcon SIEM

Auxis; Bogotá; Presencial; COP 40.000.000 - 70.000.000; Jornada completa

Descripción de la vacante

Grant Thornton's Cyber Fusion Centre (CFC) is seeking a technically strong SOC Analyst to join a follow-the-sun security operations team in Bogotá. You will handle continuous monitoring, alert triage, incident investigation, threat analysis, and remediation coordination using CrowdStrike Falcon Next-Gen SIEM and related tools.

The role covers the full security operations lifecycle, including investigation, documentation, escalation, and improvement of detection and response capabilities, in a

Formación

• 2+ years of experience in security operations, SOC monitoring, SIEM operations, EDR, MDR, incident response or related cybersecurity role.
• Hands-on experience with CrowdStrike Falcon Next-Gen SIEM/EDR.
• Experience with ServiceNow or similar ITSM/security case management platform.
• Bachelor's degree in CS/InfoSec or related discipline preferred.

Responsabilidades

• Monitor real-time security with CrowdStrike Falcon Next-Gen SIEM; perform alert triage and incident investigations.
• Coordinate containment, eradication, and recovery activities per SOC playbooks.
• Produce investigation reports and maintain evidence notes in the case management system.
• Support threat analysis, detection validation, and continuous improvement initiatives.

Conocimientos

SOC operations

SIEM operations

EDR

Incident response

Information security

Clear communication

Educación

Bachelor's degree in Computer Science / Information Security

Equivalent practical cybersecurity experience

Herramientas

CrowdStrike Falcon

ServiceNow

ITSM security

Descripción del empleo

Grant Thornton's Cyber Fusion Centre (CFC) is seeking a technically strong SOC Analyst to join a follow-the-sun security operations team in Bogotá. You will handle continuous monitoring, alert triage, incident investigation, threat analysis, and remediation coordination using CrowdStrike Falcon Next-Gen SIEM and related tools.

The role covers the full security operations lifecycle, including investigation, documentation, escalation, and improvement of detection and response capabilities, in a