European SOC Analyst: SIEM & DLP Ops

Kognitivinc; United States; Remote; USD 70,000 - 110,000; Full time

Job summary

Kognitiv Inc. seeks a cybersecurity SOC Analyst to investigate security alerts, tune detection rules, and monitor data movement across a global environment. You’ll work hands-on with SIEM and DLP tools, correlating logs from endpoints, firewalls, and cloud services to mitigate incidents.

Based in Europe with North American coverage, you’ll join a fast-growing team reporting to the security lead. This role emphasizes practical threat detection over audits, with opportunities to automate triage

Qualifications

• Hands-on SOC analyst experience investigating alerts.
• Experience with SIEM platforms (Rapid7, Splunk, Sentinel) and DLP tools.
• Experience with EDR tools and data loss investigations.
• Scripting or programming for security analysis.
• Familiarity with MITRE ATT&CK or CIS Controls.
• Security certifications like Security+ or CySA+ are helpful.
• Comfort with log data, networks and cloud architectures.

Responsibilities

• Monitor, triage and investigate security alerts in SIEM.
• Write and tune detection rules across sources.
• Identify opportunities to automate triage and reduce manual effort.
• Review DLP events to detect data exfiltration.
• Collaborate with colleagues to investigate security concerns.
• Track threats and contribute to incident response playbooks.

Skills

SOC operations

SIEM platforms

Rapid7 InsightIDR

Splunk

Microsoft Sentinel

DLP tools

Python / scripting

EDR tools

MITRE ATT&CK / CIS Controls

Education

Technical degree or equivalent

Tools

Rapid7 InsightIDR

Splunk

Microsoft Sentinel

Cyberhaven

SentinelOne

LEQL / KQL / SPL

Job description

Kognitiv Inc. seeks a cybersecurity SOC Analyst to investigate security alerts, tune detection rules, and monitor data movement across a global environment. You’ll work hands-on with SIEM and DLP tools, correlating logs from endpoints, firewalls, and cloud services to mitigate incidents.

Based in Europe with North American coverage, you’ll join a fast-growing team reporting to the security lead. This role emphasizes practical threat detection over audits, with opportunities to automate triage