SOC Analyst L2

Alongside; Porto; Híbrido; EUR 30 000 - 50 000; Tempo integral

Resumo da oferta

A financial markets management company in Porto is seeking an experienced SOC Analyst L2. The ideal candidate will focus on cybersecurity, specifically threat hunting and SIEM/EDR rules definition. Responsibilities include monitoring security alerts, conducting threat hunting, and collaborating with IT teams to improve security posture. This role offers a permanent contract, health insurance, and hybrid work arrangements.

Serviços

Health Insurance

Meal Card

Gym Ticket

Qualificações

• Solid experience in cybersecurity, focusing on threat hunting.
• Proven experience defining rules for SIEM and EDR solutions.
• Familiarity with incident response and security best practices.
• Ability to work in a fast-paced, 24/7 environment.

Responsabilidades

• Monitor security alerts and events from various security tools.
• Conduct threat hunting activities to identify potential risks.
• Develop, tune, and maintain detection rules in SIEM and EDR platforms.
• Investigate and triage security incidents.
• Perform root cause analysis and provide actionable recommendations.
• Collaborate with IT and cybersecurity teams.
• Document incidents and improvements to SOC processes.

Conhecimentos

Cybersecurity

Threat hunting

SIEM

EDR

Analytical skills

Problem-solving skills

Communication in English

Descrição da oferta de emprego

We are looking for aSOC Analyst L2to join a project at a company specializing in the management of financial markets. The ideal candidate will have solid experience in cybersecurity, with a strong focus on threat hunting and defining rules for SIEM and EDR solutions. You will play a key role in detecting, investigating, and responding to security threats, helping to maintain and improve our organization’s security posture.

Responsibilities

• Monitor security alerts and events from SIEM, EDR, IDS/IPS, firewalls, and other security tools.
• Conduct threat hunting activities to identify potential risks proactively.
• Develop, tune, and maintain detection rules in SIEM and EDR platforms.
• Investigate and triage security incidents, escalating complex cases when needed.
• Perform root cause analysis and provide actionable recommendations.
• Collaborate with IT and cybersecurity teams to implement mitigation strategies.
• Document incidents, findings, and improvements to SOC processes and playbooks.

• Solid experience in cybersecurity, with a focus on threat hunting.

• Proven experience defining rules for SIEM and EDR solutions.
• Familiarity with incident response, threat intelligence, and security best practices.
• Strong analytical and problem-solving skills.
• Good communication skills in English.

• Ability to work in a fast-paced, 24/7 operational environment (including shift work, if required);

• Permanent Contract;
• Health Insurance;
• Meal Card;
• Gym Ticket;
• Hybrid work (Porto).