Cyber Threat & SOC Analyst | Threat Intelligence

MDS Group; Porto; On-site; EUR 35,000 - 52,000; Full time

Job summary

Solutions 360, a service and technology services company of MDS Group, is recruiting a Security & Threat Intelligence Analyst to join the SOC. The role covers monitoring, investigation, incident response, and day-to-day operation of the Cyberint Threat Intelligence platform across the organisation.

You will review alerts, triage incidents, and coordinate with Cyber Security and Technology teams. Strong generic cyber security knowledge, investigative skills and English fluency are essential.

Qualifications

• Previous experience within a SOC, Cyber Security Operations or similar security role.
• Practical experience investigating security alerts and incidents.
• Experience working with SIEM, XDR, EDR or similar security monitoring technologies.
• A good understanding of common cyber threats and attack techniques.
• A good understanding of identity, endpoint, email and network security concepts.
• Experience analysing security information from multiple sources to support an investigation.
• Good analytical and troubleshooting skills.
• Ability to clearly document technical investigations and findings.
• Ability to communicate effectively with both technical and non-technical stakeholders.
• Ability to take ownership of investigations and see them through to an appropriate conclusion.
• Ability to work effectively with other Cyber Security and Technology teams.

Responsibilities

• Monitor and investigate security alerts and suspicious activity.
• Perform initial triage to determine the nature, severity and potential impact of security events.
• Investigate suspicious activity across user accounts, endpoints, email, cloud services, network infrastructure and applications.
• Correlate information from available security tools to support investigations.
• Investigate suspected account compromise, malware, phishing and other potential cyber security incidents.
• Escalate significant or complex incidents through the incident management process.
• Maintain clear and accurate records of investigations, evidence, decisions and actions.
• Work with other technical teams to support containment and remediation activities.
• Support the investigation and response to cyber security incidents.
• Perform initial response activities per procedures and playbooks.
• Coordinate actions with other teams where required.
• Support collection and preservation of relevant evidence.
• Contribute to post-incident reviews and lessons learned.
• Identify opportunities to improve monitoring and response processes after incidents.
• Manage day-to-day operation of Cyberint Threat Intelligence platform.
• Review and assess alerts and intelligence from Cyberint.
• Investigate relevant external threats and risks.
• Assess relevance of threats or vulnerabilities to the organisation.
• Coordinate remediation or escalation with internal teams.
• Monitor emerging cyber threats and vulnerabilities.
• Provide updates on significant threats.
• Liaise with Cyberint and third parties for investigation support.
• Ensure Threat Intelligence findings are tracked through to resolution.
• The SOC Analyst will coordinate Threat Intelligence findings but remediation remains with owners.
• Support phishing and suspicious email investigations.
• Support investigations involving suspected compromised accounts or endpoints.
• Perform searches across security telemetry to support investigations.
• Assist with SOC investigation procedures and response playbooks.
• Identify recurring alerts or gaps and recommend improvements.
• Support testing and tuning of security monitoring.
• Work with other Cyber Security functions and Technology teams to resolve issues.
• Contribute to regular SOC reporting and metrics.

Skills

SOC experience

Investigation experience

SIEM/XDR/EDR

Cyber threats understanding

Identity/Endpoint/Network security

Security data analysis

Analytical skills

Documentation

Communication

Ownership of investigations

Team collaboration

Tools

Palo Alto Cortex XDR/XSIAM

Cyberint Threat Intelligence

Entra ID / Active Directory

EDR tooling

ThreatLocker

Silverfort

Phishing investigations

Threat hunting

Query languages / log analysis

PowerShell

Vulnerability management

Job description

Solutions 360, a service and technology services company of MDS Group, is recruiting a Security & Threat Intelligence Analyst to join the SOC. The role covers monitoring, investigation, incident response, and day-to-day operation of the Cyberint Threat Intelligence platform across the organisation.

You will review alerts, triage incidents, and coordinate with Cyber Security and Technology teams. Strong generic cyber security knowledge, investigative skills and English fluency are essential.