SOC Analyst - Remote
Strada
CloudCyber SecurityFirewalls
Job Level
Senior
Tech Stack
CloudCyber SecuritySQL
About the role
- Join Europe's leading, high-growth Google Cloud consultancy. At Qodea, you’ll be part of a team energised by innovation and passionate about delivering exceptional results. We craft cutting-edge solutions in data and analytics, AI, cloud infrastructure and security, driving digital transformation that empowers our customers to scale, modernise and lead in their industries. We’re driven by ideas and powered by our people. We are looking for a Senior Security Analyst to join our MSSP team. We really value in-person collaboration, so we're looking for you to spend at least 60% of your time on-site. This means being at our company offices or at a client's site. How You’ll Shape Our Success: The purpose of this role is to detect, investigate and respond to security events and incidents as part of our MSSP team. Your main objective will be to sustain the efforts of our team, and as such to support our customers in their activities. What You’ll Do: Use analytical skills and attention to detail to monitor and respond to security events and incidents. Contribute to the continuous improvement of team performance and operational efficiency. Show eagerness to learn and proactively enhance skills in the cybersecurity field. Monitor logs and security events across various security tools and act as the first responder to security incidents by performing triage, threat analysis, and containment. Document and report on security incidents with detailed analysis and remediation recommendations, maintaining accurate records to enhance future responses. Communicate incident response activities to stakeholders, including technical teams, senior management, and customers. Escalate complex issues to senior analysts as needed. Optimize detection rules and alert thresholds to reduce false positives and improve accuracy. Conduct proactive threat hunting to identify potential threats that bypass security controls and detection mechanisms. Continuously research emerging threats and vulnerabilities to inform detection strategies and incident response playbooks. Participate in our incident response on-call service to support the team when necessary
Requirements
- Strong communication skills in English, both written and verbal. Understanding of how adversaries compromise networks, the stages of an attack, and effective detection techniques. Knowledge of enterprise security technologies, operating systems, cloud services, and the ability to identify indicators of compromise across these environments. Analytical and problem-solving skills, with proficiency in assessing security alerts, conducting log analysis, vulnerability assessments, and identifying exploitation techniques. Self-driven with the ability to work independently and collaborate effectively in teams. Experience with security tools and technologies such as SIEM, SOAR, EDR, NDR, and major cloud platforms. Familiarity with basic scripting and the ability to search log data and write detection rules using SQL-like query languages.
