SOC Analyst (Lisbon - Hybrid)

Claranet limited; Lisboa; Híbrido; EUR 42 000 - 62 000; Tempo integral

Resumo da oferta

Claranet limited in Lisboa, Portugal is seeking a skilled SOC Analyst to join our Talent team and safeguard digital assets across customer environments. You will monitor security events, investigate alerts, and contribute to incident response and containment.

The role emphasizes hands-on SIEM experience (Splunk, QRadar, Microsoft Sentinel), log analysis, and collaboration with IT and cybersecurity teams. Advanced English is mandatory, and prior work in security operations is essential.

Qualificações

• 3+ years in Security Operations (SOC) or security monitoring.
• Advanced English is mandatory.
• Hands-on experience with SIEM platforms (e.g., Splunk, QRadar, Microsoft Sentinel).
• Experience analysing security logs and network events.
• Solid understanding of network protocols, operating systems, and IT architecture.
• Familiarity with security tools such as EDR/XDR, IDS/IPS, firewalls, and endpoint protection.
• Knowledge of cybersecurity frameworks (e.g., MITRE ATT&CK, NIST).
• Experience with security incident management processes.

Responsabilidades

• Support the internal SOC team in triage, investigation, and resolution of security alerts.
• Monitor security events and alerts across SIEMs, EDR, IDS/IPS, firewalls, and other tools.
• Analyze alerts to identify potential incidents or suspicious activity.
• Perform incident triage and classification according to procedures.
• Execute initial response and containment actions when applicable.
• Escalate incidents to advanced security teams or relevant technical groups.
• Perform log analysis and event correlation using SIEM platforms.
• Document incidents and actions in line with SOC processes.
• Contribute to improving detection rules and use cases.
• Fine-tune security tools to reduce false positives.
• Collaborate with IT and cybersecurity teams on investigations.

Conhecimentos

Security operations

English proficiency

Incident management

Network knowledge

Threat detection

Ferramentas

Splunk

QRadar

Microsoft Sentinel

EDR/XDR

IDS/IPS

Firewalls

Descrição da oferta de emprego

We're fast learners, hardworkers, natural collaborators... and weMake Modern Happen!

Our ambition is to unlock thepotential of our digital world so that organisations everywhere can innovateand thrive securely. We aim to achieve this goal by bringing together theworld’s most talented people and the most powerful technologies, combining themto address our customers' challenges and to build something stronger together.

Right now, weare looking for a SOC Analyst to integrate our Talent team.

Yourresponsibilities include:

• Support the internal SOC team in the triage,investigation, and resolution of security alerts
  
• Monitor security events and alerts acrossmultiple tools (SIEM, EDR, IDS/IPS, firewalls, etc.)
  
• Analyze and investigate alerts to identifypotential security incidents or suspicious activity
  
• Perform triage and classification of incidentsaccording to defined procedures
  
• Execute initial response and containment actionswhen applicable
  
• Escalate incidents to advanced security teams orrelevant technical teams as needed
  
• Perform log analysis and event correlation usingSIEM platforms
  
• Document incidents, investigations, and actionsin line with SOC processes
  
• Contribute to the continuous improvement ofdetection rules and use cases
  
• Support the fine-tuning of security tools toreduce false positives
  
• Collaborate with IT and cybersecurity teams onincident investigation and resolution
  

Youmust have:

• Minimum of 3 years of experience in SecurityOperations (SOC) or security monitoring
  
• Advanced English (mandatory)
  
• Hands-on experience with SIEM platforms (e.g.,Splunk, QRadar, Microsoft Sentinel)
  
• Experience analysing security logs and networkevents
  
• Solid understanding of network protocols,operating systems, and IT architecture
  
• Familiarity with security tools such as EDR/XDR,IDS/IPS, firewalls, and endpoint protection
  
• Knowledge of cybersecurity frameworks (e.g.,MITRE ATT&CK, NIST)
  
• Experience with security incident managementprocesses
  

Wevalue:

• Experience in threat hunting or advanced incidentanalysis
  
• Knowledge of security automation andorchestration tools (SOAR)
  
• Experience working with cloud environments(Azure, AWS, or GCP)
  
• Relevant cybersecurity certifications (e.g.,CompTIA Security+, CySA+, GCIH, SC-200)