SOC Analyst: Incident Response & Threat Monitoring

Claranet Portugal; Lisboa; Presencial; EUR 42 000 - 54 000; Tempo integral

Resumo da oferta

Claranet Portugal is seeking a SOC Analyst to join our Talent team in Lisbon. You will support the SOC, investigate security alerts, and coordinate with IT and cybersecurity teams to resolve incidents.

The role requires at least 3 years in security operations, strong English, and hands-on SIEM/tool experience. You will work with leading security platforms and contribute to detection rule enhancements.

Qualificações

• Minimum of 3 years of experience in Security Operations (SOC) or security monitoring.
• Advanced English is mandatory.
• Hands-on experience with SIEM platforms and security tools.

Responsabilidades

• Support the internal SOC team in triage, investigation, and resolution of security alerts.
• Monitor security events and alerts across SIEM, EDR, IDS/IPS, firewalls, and other tools.
• Analyze and investigate alerts to identify potential security incidents or suspicious activity.
• Perform triage and classification of incidents according to defined procedures.
• Execute initial response and containment actions when applicable.
• Escalate incidents to advanced security teams as needed.
• Perform log analysis and event correlation using SIEM platforms.
• Document incidents, investigations, and actions in line with SOC processes.
• Contribute to improvements of detection rules and use cases.
• Support fine-tuning of security tools to reduce false positives.
• Collaborate with IT and cybersecurity teams on incident investigation and resolution.

Conhecimentos

Advanced English

SOC experience

Log analysis

Network protocols knowledge

MITRE ATT&CK

NIST frameworks

Formação académica

Cybersecurity certifications (e.g., CompTIA Security+, CySA+, GCIH, SC-200)

Ferramentas

Splunk

QRadar

Microsoft Sentinel

EDR/XDR

IDS/IPS

Firewalls

Endpoint protection

Descrição da oferta de emprego

Claranet Portugal is seeking a SOC Analyst to join our Talent team in Lisbon. You will support the SOC, investigate security alerts, and coordinate with IT and cybersecurity teams to resolve incidents.

The role requires at least 3 years in security operations, strong English, and hands-on SIEM/tool experience. You will work with leading security platforms and contribute to detection rule enhancements.