Remote Cyber Defense Security Operations Analyst

Trigyn Technologies Limited; United States; Teletrabalho; EUR 70 000 - 110 000; Tempo integral

Resumo da oferta

Trigyn Technologies Limited seeks a Security Operations Analyst (Cyber Defense Operations) to join the 24x7 CSOC in a remote capacity. The role involves monitoring, triage, investigation, and response to cyber threats for partners worldwide, collaborating with cybersecurity experts.

The incumbent will analyze alerts from Microsoft security tools, AWS, SIEM/EDR, and will contribute to incident response, threat management, and reporting. Fluent English is required.

Qualificações

• 5+ years in IT with alert triage and security incidents.
• Experience with SIEM/EDR tools and autonomous threat analysis.
• Trouble ticket generation and processing experience.
• Expert knowledge of Windows, Linux, DBs and Web server logs.
• TCP/IP protocol knowledge essential.
• Deep knowledge of Microsoft security tools and cloud platforms.
• Experience with Azure, AWS, GCP and Splunk/QRadar/ArcSight.
• Knowledge of at least one EDR solution such as Defender for Endpoint or CrowdStrike.
• Familiar with email security, network monitoring and incident response.
• Fluent English, written and spoken.

Responsabilidades

• Monitor, triage and investigate alerts across security tools and SIEM/EDR platforms.
• Analyze network and host logs to determine remediation steps and escalation.
• Identify root causes and support incident response and containment.
• Prepare security reports, summaries and client-facing findings.
• Contribute to CSOC process improvements and knowledge base updates.

Conhecimentos

SOC tooling

Threat analysis

Incident response

Log analysis

TCP/IP knowledge

Cloud security

Ferramentas

Splunk

QRadar

ArcSight

MS Sentinel

ELK Stack

EDR (Defender for Endpoint)

Descrição da oferta de emprego

Trigyn Technologies Limited seeks a Security Operations Analyst (Cyber Defense Operations) to join the 24x7 CSOC in a remote capacity. The role involves monitoring, triage, investigation, and response to cyber threats for partners worldwide, collaborating with cybersecurity experts.

The incumbent will analyze alerts from Microsoft security tools, AWS, SIEM/EDR, and will contribute to incident response, threat management, and reporting. Fluent English is required.