Cyber Security Operations Center (CSOC) Analyst (English Speaker)

📋 Description

• Perform triage, analysis, and escalation of security alerts across SIEM, EDR/XDR, WAF, email
• Own incidents end-to-end — triage through resolution through "what changed afterward" — and turn
• Develop, tune, and validate SIEM detection rules (ES|QL/EQL/KQL or equivalent), including running
• Convert threat intelligence feeds and scheduled hunting queries (e.g., lookalike domain alerts
• Support the build-out of an insider threat monitoring program, including identity and
• Understand our detection tooling and log source pipelines (maintained day-to-day by our MSSP) well

🎯 Requirements

• Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or a related field.
• 3-4 years of experience in a Security Operations Center (SOC) or equivalent security
• Hands-on experience with SIEM tools, including: 1. Detection rule and use case development, and the
• Working knowledge of Python or similar scripting for automation, log parsing, or extending existing
• Knowledge of common attack techniques, malware behavior, and network security principles, with
• Familiarity with incident response frameworks (e.g., NIST, SANS) and a track record of writing

🎁 Benefits

• Competitive total compensation package.
• Various team-building programs and company events.
• And many more! Apply and let us tell you more!