SOC Threat Hunter & Incident Response Analyst

EPAM Systems, Inc.; Mexico; Hybrid; PHP 5,618,000 - 8,115,000; Full time

Benefits offered by this job

Healthcare benefits

Paid time off & sick leave

Learning & certification programs

Global career opportunities

Job summary

EPAM Systems, Inc. is seeking a Security Operations (SOC) Analyst to strengthen monitoring, incident response, and detection engineering across a SOC environment. You will triage alerts, hunt threats, and communicate findings through clear reporting to raise our security posture.

You will coordinate containment/remediation, develop detection use cases, and support on-call coverage every 8th weekend. Join a global team focused on resilient security operations and continuous improvement.

Qualifications

• 2+ years of SOC operations and security monitoring experience.
• Experience triaging and prioritizing security alerts.
• Strong incident response and containment skills.
• Proven ability to develop detection rule sets and use cases.

Responsibilities

• Respond to security incidents and coordinate containment/remediation actions.
• Triage and investigate alerts across SOC toolset.
• Develop and tune detection rules to improve quality and reduce false positives.
• Hunt threats and support threat intelligence mapping to TTPs.
• Improve SOC/SOAR workflows and automation.
• Generate clear reports for stakeholders.

Skills

SOC operations

Incident response

Alert triage

Threat hunting

Threat intelligence

Tabletop exercises

On-call readiness

English proficiency

Tools

Splunk

Microsoft Defender

Azure Sentinel

Job description

EPAM Systems, Inc. is seeking a Security Operations (SOC) Analyst to strengthen monitoring, incident response, and detection engineering across a SOC environment. You will triage alerts, hunt threats, and communicate findings through clear reporting to raise our security posture.

You will coordinate containment/remediation, develop detection use cases, and support on-call coverage every 8th weekend. Join a global team focused on resilient security operations and continuous improvement.