SOC L3 Analyst

Tata Consultancy Services; Lisboa; Hybrid; EUR 40,000 - 60,000; Full time

Benefits offered by this job

Competitive salary

Flexible compensation plan

Health Insurance

Career development plan

Onboarding program

Team Building activities

Job summary

A global IT services company in Lisbon seeks a SOC L3 Analyst with a strong background in security operations and incident response. The role requires a minimum of 4 years of experience, extensive knowledge of SIEM platforms, and an understanding of threat frameworks. Candidates should possess strong communication skills and lead incident response efforts. Competitive salary and flexible benefits are offered, along with a supportive environment for career growth and development.

Qualifications

• Minimum of 4 years of hands-on experience in security operations, incident response, or threat detection roles.
• Proficient in operating and fine-tuning SIEM platforms.
• Solid understanding of the MITRE ATT&CK framework and TTPs.

Responsibilities

• Triage, investigate, and confirm the validity of high-priority security incidents.
• Lead or support containment, eradication, and remediation efforts for confirmed threats.
• Develop and maintain incident tracking and performance metrics.

Skills

Experience in Security Operations

SIEM Expertise

Threat Framework Fluency

Communication & Collaboration Skills

Automation & Scripting

Job description

Are you a SOC L3 Analyst seeking a new interesting challenge? 🔍

If your answer is yes, it’s your lucky day so keep reading, it can be just what you're looking for! 👀

• Experience in Security Operations: Minimum of 4 years of hands-on experience in security operations, incident response, or threat detection roles, preferably in a hybrid SOC environment.
• SIEM Expertise: Proven proficiency in operating and fine-tuning SIEM platforms such as Microsoft Sentinel, Splunk ES, Google SecOps, or Palo Alto XSIAM, with the ability to craft detection logic, optimize use cases, and interpret complex alert patterns.
• Threat Framework Fluency: Solid understanding of the MITRE ATT&CK framework, cyber kill chain, and attacker tactics, techniques, and procedures (TTPs), with demonstrated ability to apply them in detection and analysis workflows.
• Should be able to lead the team
• Communication & Collaboration Skills: Strong written and verbal communication skills, capable of engaging with both technical and non-technical stakeholders, clearly articulating threat impact and recommended actions.
• Analyze and Validate Escalated Incidents: Triage, investigate, and confirm the validity and impact of high-priority security incidents escalated by the MSSP, ensuring appropriate urgency and action.
• Enrich with Contextual Intelligence: Integrate internal telemetry, threat intelligence, and business context to enhance incident understanding and enable accurate prioritization and response.
• Enhance Detection and Use Case Coverage: Collaborate with MSSP and internal teams to continuously improve detection capabilities, including refining SIEM use cases, correlation logic, and detection rules.
• Coordinate Response Activities: Lead or support containment, eradication, and remediation efforts for confirmed threats, ensuring alignment with incident response plans and minimizing business disruption.
• Maintain Response Frameworks: Keep incident response plans, playbooks, and escalation workflows up to date, ensuring alignment with evolving threats, organizational structure, and regulatory requirements.
• Track Metrics and Reporting: Support the development and maintenance of incident tracking and performance metrics to ensure transparency, accountability, and continuous improvement in response effectiveness.
• Possess strong behavioural and communication skills
• Automation & Scripting (Preferred): Familiarity with scripting languages such as Python or PowerShell to support automation, enrichment, or custom tooling is considered a plus.
• Workplace: Lisbon + hybrid work
• Work Schedule: 9AM to 6PM
• Permanent contract
• Pay and benefits - Competitive salary and a flexible compensation plan adapted to your needs (Ticket restaurant plan + Health Insurance).
• Opportunity knocks - Being a part of a growing company, we want to support your path with a career development plan and annual performance-based compensation reviews.
• Learn as you grow - Starting with a fantastic onboarding program, TCS has robust learning platforms that will allow you to learn and grow personal as professionally.
• Bring your buddy - If you have referred a friend for an open position under the BYB Scheme and she/he is hired you’ll receive a very attractive cash award.
• Connect globally - Work with people from all over the world. You can feel the multicultural workforce.
• And so on - Appreciations, incentives, Team Building activities, diversity and inclusion programs, sustainability activities, corporative events... This has only just begun!

Tata Consultancy Services (TCS) is an Information Technology (IT) company founded in 1968, being part of the Tata Group.

With a presence in 55 countries and over 600,000 employees, TCS is recognized as the #1 Employer in Europe by the Top Employers Institute 🥇

In our portfolio of services, we have information technology services, asset-based solutions, global consulting, engineering and industrial services, digital solutions and services, application maintenance and development, quality assurance and testing services, IT infrastructure and BPS 🎯

We stand out for our experience, reliability, passion, confidence, creativity and skills 💯