Remote SOC Analyst — Threat Hunting & Incident Response

Arista; Polska; Hybrid; PLN 120,000 - 180,000; Full time

Job summary

Arista Networks is seeking a proactive SOC Analyst to monitor, triage, and respond to security threats across Mac, Linux, and Windows systems. The role emphasizes building detections with CrowdStrike, writing CQL queries, and leveraging SIEM for threat hunting.

You will work with a remote cybersecurity team, collaborating with incident responders, threat hunters, and cross-functional partners to maintain a strong security posture.

Qualifications

• Hands-on experience with CrowdStrike or other EDRs and triaging security incidents.
• Experience writing CQL queries and building detections for threat monitoring.
• Familiarity with SIEM, threat hunting, and incident response processes.

Responsibilities

• Monitor and triage security alerts across Mac, Linux, and Windows environments.
• Build, test, and refine detections to improve threat identification.
• Conduct in-depth analysis of security incidents and respond per IR protocols.
• Perform proactive threat hunting using SIEM and EDR features.
• Collaborate with IT, engineering, and DevOps to strengthen security controls.
• Document findings and provide remediation recommendations.
• Participate in 24x7x365 SOC on-call rotation.

Skills

CrowdStrike

CQL

EDR

SIEM

Threat hunting

Incident response

Mac

Linux

Windows

Education

Bachelor’s degree in Cybersecurity/IT/CS

Tools

CrowdStrike Fusion SOAR

VirusTotal

Job description

Arista Networks is seeking a proactive SOC Analyst to monitor, triage, and respond to security threats across Mac, Linux, and Windows systems. The role emphasizes building detections with CrowdStrike, writing CQL queries, and leveraging SIEM for threat hunting.

You will work with a remote cybersecurity team, collaborating with incident responders, threat hunters, and cross-functional partners to maintain a strong security posture.