Security Operations Center Analyst

This is a fully remote position, open to applicants in Ireland.

📋 Description

• Oversee and prioritize security alerts

• Develop, test, and enhance detection mechanisms across Mac, Linux, and Windows platforms

• Examine security incidents such as malware, phishing, and advanced persistent threats utilizing SIEM and EDR tools

• Conduct proactive threat hunting using SIEM and EDR functionalities

• Investigate and respond to incidents in accordance with established incident response protocols

• Document findings and offer actionable recommendations for remediation

• Collaborate with IT, engineering, DevOps, incident response teams, threat hunters, and various cross-functional groups

• Keep abreast of emerging threats, vulnerabilities, and industry developments

• Engage in the 24x7x365 SOC on-call rotation

• Escalate confirmed or suspicious incidents to the Incident Response team

⛳️ Requirements

• 4-5+ years of experience in a SOC or active involvement in incident response teams

• Practical experience with CrowdStrike or other EDR solutions

• Demonstrated ability to write CQL or equivalent queries and create detections

• Experience in triaging alerts in a high-volume setting

• Familiarity with threat intelligence feeds, platforms, and OSINT tools like VirusTotal

• Knowledge of forensic analysis and evidence handling

• Strong grasp of cybersecurity principles, threat landscapes, and attack vectors

• Proficient in analyzing logs, network traffic, and endpoint data using CrowdStrike Next-Gen SIEM

• Primary expertise in Mac and Linux systems; secondary familiarity with Windows

• Solid understanding of incident response processes and methodologies

• Excellent critical thinking and analytical abilities

• Capability to take initiative and achieve results independently

• Ability to make informed decisions under pressure

• Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, or a related field, or equivalent experience (preferred)

• Proficiency in scripting languages such as Python (preferred)

• Experience developing playbooks in CrowdStrike Fusion SOAR or similar SOAR solutions (preferred)

• Understanding of cloud security across GCP, AWS, and/or Azure (preferred)

🏝️ Benefits

• Remote work options

• Emphasis on work-life balance

• An inclusive and diverse work environment

• Opportunities for professional development and continuous learning

• Participation in the 24x7x365 SOC on-call rotation