Security Operations (SOC) Analyst

EPAM Systems, Inc.; Mexico; Hybrid; PHP 5,618,000 - 8,115,000; Full time

Benefits offered by this job

Healthcare benefits

Paid time off & sick leave

Learning & certification programs

Global career opportunities

Job summary

EPAM Systems, Inc. is seeking a Security Operations (SOC) Analyst to strengthen monitoring, incident response, and detection engineering across a SOC environment. You will triage alerts, hunt threats, and communicate findings through clear reporting to raise our security posture.

You will coordinate containment/remediation, develop detection use cases, and support on-call coverage every 8th weekend. Join a global team focused on resilient security operations and continuous improvement.

Qualifications

• 2+ years of SOC operations and security monitoring experience.
• Experience triaging and prioritizing security alerts.
• Strong incident response and containment skills.
• Proven ability to develop detection rule sets and use cases.

Responsibilities

• Respond to security incidents and coordinate containment/remediation actions.
• Triage and investigate alerts across SOC toolset.
• Develop and tune detection rules to improve quality and reduce false positives.
• Hunt threats and support threat intelligence mapping to TTPs.
• Improve SOC/SOAR workflows and automation.
• Generate clear reports for stakeholders.

Skills

SOC operations

Incident response

Alert triage

Threat hunting

Threat intelligence

Tabletop exercises

On-call readiness

English proficiency

Tools

Splunk

Microsoft Defender

Azure Sentinel

Job description

We are looking for a Security Operations (SOC) Analyst to strengthen security monitoring, incident response, and detection engineering across a SOC environment. You will triage alerts, hunt threats, improve SOC/SOAR workflows, and communicate findings through clear reporting—apply now to help raise our security posture.ResponsibilitiesRespond to security incidents and coordinate appropriate containment and remediation actionsTriage, investigate, and prioritize security alerts across the SOC toolsetDevelop and tune rule sets and use cases to improve detection quality and reduce false positivesHunt for threats and support threat intelligence processes, including mapping to TTPsUse advanced analytic tools to identify emerging threat patterns and vulnerabilitiesImprove SOC/SOAR tooling, workflows, and automation to raise efficiency and coverageGenerate clear reports for various stakeholders and communicate findings effectivelyPlan and run SOC tabletop exercises to validate readiness and response proceduresParticipate in the on-call rotation every 8th weekendRequirements2+ years of experience in Security Operation Center (SOC) operations and security monitoring2+ years of experience with SIEM and endpoint security tools such as Splunk and Microsoft DefenderStrong incident response skills and alert triage capabilitySolid use case development skills for rule sets and detection logicGood knowledge of malware detection and intrusion detection and prevention systems (IDPS)Strong understanding of Windows, Linux, database, and network device monitoring and logging techniquesGood understanding of host and network security hardening, networking protocols, common intrusion techniques, and risk management conceptsStrong analytical skills to identify emerging threat patterns and vulnerabilities using advanced analyticsHigh attention to detail and strong logical thinkingCurious mindset and confidence to ask questions when neededUpper-Intermediate English proficiency (B2)Availability for on-call duty every 8th weekendNice to haveTanium experience or exposure to asset management, patch management, and EDR solutionsQualys experienceAzure Sentinel experienceAWS security experienceServiceNow SecOps experienceWe offerInternational projects with top brandsWork with global teams of highly skilled, diverse peersHealthcare benefitsEmployee financial programsPaid time off and sick leaveUpskilling, reskilling and certification coursesUnlimited access to the LinkedIn Learning library and 22,000+ coursesGlobal career opportunitiesVolunteer and community involvement opportunitiesEPAM Employee GroupsAward-winning culture recognized by Glassdoor, Newsweek and LinkedInEPAM is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, age, sexual orientation, gender identity or expression, disability, protected veteran status, or any other characteristic protected by applicable law.