SOC Analyst L1/L2

Jobtailor; Porto; Presencial; EUR 28 000 - 48 000; Tempo integral

Resumo da oferta

Jobtailor is seeking a vigilant cybersecurity professional to join our security operations team in Porto, Portugal. You will monitor alerts, hunt threats, and tune detection rules across SIEM and EDR platforms to protect our digital assets.

The role requires strong English communication, the ability to work in a 24/7 environment, and close collaboration with IT and security teams to improve incident response and SOC playbooks.

Qualificações

• Experience in cybersecurity with emphasis on threat hunting.
• Experience defining rules for SIEM and EDR solutions.
• Strong English communication and teamwork.

Responsabilidades

• Monitor security alerts from SIEM, EDR, IDS/IPS, and firewalls.
• Conduct threat hunting to identify risks.
• Develop, tune, and maintain detection rules in SIEM/EDR.
• Investigate and triage security incidents; escalate complex cases.
• Perform root cause analysis and provide recommendations.
• Collaborate with IT and cybersecurity teams to implement mitigations.
• Document incidents, findings, and SOC playbooks.

Conhecimentos

Threat hunting

SIEM/EDR rule definition

Incident response

Threat intelligence

Analytical skills

Communication in English

Ferramentas

SIEM

EDR

Descrição da oferta de emprego

Responsibilities

• Monitor security alerts and events from SIEM, EDR, IDS/IPS, firewalls, and other security tools.
• Conduct threat hunting activities to identify potential risks proactively.
• Develop, tune, and maintain detection rules in SIEM and EDR platforms.
• Investigate and triage security incidents, escalating complex cases when needed.
• Perform root cause analysis and provide actionable recommendations.
• Collaborate with IT and cybersecurity teams to implement mitigation strategies.
• Document incidents, findings, and improvements to SOC processes and playbooks.

Requirements

• Solid experience in cybersecurity, with a focus on threat hunting.
• Proven experience defining rules for SIEM and EDR solutions.
• Familiarity with incident response, threat intelligence, and security best practices.
• Strong analytical and problem-solving skills.
• Good communication skills in English.
• Ability to work in a fast-paced, 24/7 operational environment (including shift work, if required).