SOC Analyst

LeapXpert

SOC Analyst ensuring global cybersecurity and operationalizing security operations at LeapXpert. Collaborating with teams to enhance detection and response capabilities while monitoring security events.

Posted 5/24/2026full-timeSofia • 🇧🇬 BulgariaJuniorMid-LevelWebsite

Tech Stack

Tools & technologies

AWSAzureCloudCyber SecurityFirewallsGoogle Cloud PlatformSplunk

About the role

Key responsibilities & impact

24/7 Security Monitoring: Monitor SIEM tools, security logs, and alerts for potential threats and anomalies across networks, endpoints, and applications
Incident Handling: Triage, investigate, and escalate security incidents following established playbooks and escalation paths
Threat Analysis & Reporting: Analyze security events, identify patterns, and provide detailed incident documentation and reporting
Collaboration: Coordinate with IT, network, and application teams to remediate security issues
Continuous Improvement: Suggest and implement improvements to SOC processes, ticketing workflows, and monitoring strategies to enhance operational efficiency
SOC Program Development: Contribute to the design and operationalization of SOC processes, playbooks, escalation paths, and documentation as part of building a mature SecOps function
Detection Engineering Support: Assist in tuning SIEM and EDR rules, reducing false positives, and validating alert logic in coordination with the detection engineering function
AI & Automation: Leverage AI-assisted tools and automation platforms to improve detection fidelity, reduce alert fatigue, and accelerate response times. Contribute to the evaluation and adoption of SOAR or workflow automation tooling as the program matures
Shift Operations: Work a fixed late-start schedule (12:00–21:00 Sofia local time) as part of a structured follow-the-sun coverage model with existing team members.

Requirements

What you’ll need

Education: Bachelor’s degree in IT, Computer Science, Cybersecurity, or related field (or equivalent work experience)
Hands-on experience with SIEM solutions; Panther SaaS preferred (e.g., Panther, Splunk, Microsoft Sentinel) with monitoring, querying, and alert triage/tuning
Solid understanding of core cybersecurity concepts: EDR, firewalls, IDS/IPS, malware, phishing, and incident response
Strong problem-solving abilities, attention to detail, effective communication, and the ability to work well under pressure in a fast-paced environment
Certifications (Preferred): CompTIA CySA+ or Security+, Microsoft SC-200 (Security Operations Analyst), GIAC GCIA or GCIH, or any vendor certification in SIEM, EDR, or cloud security platforms
2–4 years of experience in a SOC – security operations or incident response roles
Experience with cloud security monitoring (e.g., AWS, Azure, or GCP preferred); candidates with strong on-premises security monitoring experience will be considered.
Exposure to shift-based work or 24/7 operational environments
Experience with automation, scripting, or log analysis is a plus
Understanding of SaaS security concepts and common attack vectors, including API abuse, OAuth misuse, and identity-based threats
Familiarity with SOAR platforms or workflow automation tools (e.g., Torq, Tines)
Exposure to AI-assisted security tooling, such as AI-driven SIEM analytics, LLM-assisted triage, or anomaly detection, and an eagerness to learn and leverage AI
Comfort operating in an environment where automation and AI tooling are core to daily workflows.

Benefits

Comp & perks

Innovative Culture: Work at the cutting edge of business communication technology, with a product that’s changing the way Fortune 500 companies communicate.
Impactful Work: Your contributions will directly impact how millions of professionals connect and collaborate worldwide.
Global Team : Be part of a diverse, mission-driven team that values collaboration, innovation, and growth.
Growth Opportunities: With our rapid expansion, there are plenty of opportunities for professional growth and development.
Award-Winning Product: Join a company with a track record of success and recognition, including accolades like being named a Gartner Cool Vendor.

ATS Keywords

✓ Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills & Tools

SIEMEDRfirewallsIDSIPSmalwarephishingincident responseautomationlog analysis

Soft Skills

problem-solvingattention to detaileffective communicationability to work under pressurecollaborationcontinuous improvementanalytical thinkingadaptabilitytime managementteamwork

Certifications

CompTIA CySA+Security+Microsoft SC-200GIAC GCIAGIAC GCIH