SOC Analyst L1/L2

Alongside; Porto; Híbrido; EUR 42 000 - 65 000; Tempo integral

Vantagens oferecidas por esta oferta de emprego

Employment Contract

Health Insurance

Meal Card

Gym Ticket

Hybrid work (Porto)

Resumo da oferta

Alongside is seeking a SOC Analyst L1/L2 to join a fintech-focused project in Porto. The role emphasizes threat hunting, incident response, and defining rules for SIEM and EDR to improve security posture.

You will monitor alerts from SIEM/EDR, investigate incidents, and collaborate with IT and cybersecurity teams in a fast-paced, 24/7 environment. Hybrid work in Porto is available, with office days four times per week.

Qualificações

• Solid experience in cybersecurity with a focus on threat hunting.
• Proven experience defining rules for SIEM and EDR solutions.
• Familiarity with incident response, threat intelligence and security best practices.
• Strong analytical and problem-solving skills.
• Good communication skills in English; able to work in a fast-paced 24/7 environment.

Responsabilidades

• Monitor security alerts and events from SIEM, EDR, IDS/IPS, firewalls and other tools.
• Conduct threat hunting to identify potential risks proactively.
• Develop, tune and maintain detection rules in SIEM and EDR platforms.
• Investigate and triage security incidents and escalate complex cases when needed.
• Perform root cause analysis and provide actionable recommendations.
• Collaborate with IT and cybersecurity teams to implement mitigations.
• Document incidents, findings and SOC playbooks for continuous improvement.

Conhecimentos

Cybersecurity

Threat hunting

Incident response

Analytical thinking

English communication

Ferramentas

SIEM

EDR

Descrição da oferta de emprego

Overview

Alongside partners with organizations to drive digital transformation and build high-performing tech teams.

Role

We are looking for a SOC Analyst L1/L2 to join a project at a company specializing in the management of financial markets. The ideal candidate will have solid experience in cybersecurity, with a strong focus on threat hunting and defining rules for SIEM and EDR solutions. You will play a key role in detecting, investigating, and responding to security threats, helping to maintain and improve our organization\'s security posture.

Responsibilities

• Monitor security alerts and events from SIEM, EDR, IDS/IPS, firewalls, and other security tools.
• Conduct threat hunting activities to identify potential risks proactively.
• Develop, tune, and maintain detection rules in SIEM and EDR platforms.
• Investigate and triage security incidents, escalating complex cases when needed.
• Perform root cause analysis and provide actionable recommendations.
• Collaborate with IT and cybersecurity teams to implement mitigation strategies.
• Document incidents, findings, and improvements to SOC processes and playbooks.

Requirements

• Solid experience in cybersecurity, with a focus on threat hunting.
• Proven experience defining rules for SIEM and EDR solutions.
• Familiarity with incident response, threat intelligence, and security best practices.
• Strong analytical and problem-solving skills.
• Good communication skills in English.
• Ability to work in a fast-paced, 24/7 operational environment (including shift work, if required).

Benefits

• Employment Contract;
• Health Insurance;
• Meal Card;
• Gym Ticket;
• Hybrid work (Porto) - 4x per week at the office