SOC Analyst L1/L2

Alongside; Porto; Hybrid; EUR 32,000 - 54,000; Full time

Benefits offered by this job

Health Insurance

Meal Card

Gym Ticket

Hybrid work (Porto) – 4x per week

Employment Contract

Job summary

Alongside is seeking a SOC Analyst L1/L2 to join a project at a company specializing in the management of financial markets. The ideal candidate will have solid experience in cybersecurity, with a strong focus on threat hunting and defining rules for SIEM and EDR solutions.

You will monitor security alerts, perform threat hunting, tune detection rules, investigate incidents, and document findings. The role offers hybrid work (Porto) with 4x office days per week.

Qualifications

• Solid experience in cybersecurity with a focus on threat hunting.
• Proven experience defining rules for SIEM and EDR solutions.
• Strong analytical and problem-solving skills; good English communication.

Responsibilities

• Monitor security alerts and events from SIEM, EDR, IDS/IPS, firewalls, and other tools.
• Conduct threat hunting to identify potential risks proactively.
• Develop, tune, and maintain detection rules in SIEM and EDR platforms.
• Investigate and triage security incidents; escalate complex cases as needed.
• Perform root cause analysis and provide actionable recommendations.
• Document incidents, findings, and improvements to SOC processes and playbooks.

Skills

Cybersecurity

Threat hunting

SIEM/EDR rules

Incident response

Threat intelligence

Security best practices

Analytical thinking

English communication

Tools

SIEM platforms

EDR platforms

IDS/IPS

Firewalls

Job description

Alongside partners with organizations to drive digital transformation and build high-performing tech teams.

We are looking for aSOC Analyst L1/L2to join a project at a company specializing in the management of financial markets. The ideal candidate will have solid experience in cybersecurity, with a strong focus on threat hunting and defining rules for SIEM and EDR solutions. You will play a key role in detecting, investigating, and responding to security threats, helping to maintain and improve our organization’s security posture.

Responsibilities

• Monitor security alerts and events from SIEM, EDR, IDS/IPS, firewalls, and other security tools.
• Conduct threat hunting activities to identify potential risks proactively.
• Develop, tune, and maintain detection rules in SIEM and EDR platforms.
• Investigate and triage security incidents, escalating complex cases when needed.
• Perform root cause analysis and provide actionable recommendations.
• Collaborate with IT and cybersecurity teams to implement mitigation strategies.
• Document incidents, findings, and improvements to SOC processes and playbooks.

• Solid experience in cybersecurity, with a focus on threat hunting.

• Proven experience defining rules for SIEM and EDR solutions.
• Familiarity with incident response, threat intelligence, and security best practices.
• Strong analytical and problem-solving skills.
• Good communication skills in English.

• Ability to work in a fast-paced, 24/7 operational environment (including shift work, if required).

• Employment Contract;
• Health Insurance;
• Meal Card;
• Gym Ticket;
• Hybrid work (Porto) - 4x per week at the office.