Cybersecurity Engineer Tier 2: L2 SOC Analyst

Claranet; Lisboa; Presencial; EUR 45 000 - 65 000; Tempo integral

Resumo da oferta

Claranet in Lisbon/Porto is seeking a Cybersecurity Engineer Tier 2 to join our internal SOC team. You will act as an L2 SOC Analyst, validating alerts escalated by Tier 1 and tuning detection rules in Microsoft Sentinel and Defender.

You will conduct root-cause analysis of incidents, support DFIR activities, and contribute to threat hunting, reporting, and continuous improvement of SOC processes. Collaboration with teams and clear communication are essential.

Qualificações

• Solid SOC experience with incident analysis.
• Hands-on with Microsoft Sentinel and Defender.
• Strong technical analysis and incident investigation skills.
• Knowledge of MITRE ATT&CK and IR/DFIR concepts.

Responsabilidades

• Act as an L2 SOC Analyst handling alerts escalated by Tier 1.
• Tune and optimize detection rules in SIEM/EDR/XDR.
• Perform root cause analysis of security incidents.
• Support DFIR activities including evidence collection.
• Produce technical and executive reports for clients.

Conhecimentos

SOC experience

MITRE ATT&CK

DFIR fundamentals

Incident investigation

Formação académica

Security certifications (SC-200, GCED, GCIA, CySA+, Security+)

Ferramentas

Microsoft Sentinel

Microsoft Defender

SIEM/EDR/XDR

Azure

Descrição da oferta de emprego

Claranet in Lisbon/Porto is seeking a Cybersecurity Engineer Tier 2 to join our internal SOC team. You will act as an L2 SOC Analyst, validating alerts escalated by Tier 1 and tuning detection rules in Microsoft Sentinel and Defender.

You will conduct root-cause analysis of incidents, support DFIR activities, and contribute to threat hunting, reporting, and continuous improvement of SOC processes. Collaboration with teams and clear communication are essential.