Job Summary: A professional responsible for monitoring, detecting, and responding to information security incidents, analyzing security events, and supporting the continuous improvement of technological protection. Key Highlights: 1. Monitoring and responding to security incidents 2. Analyzing security events and investigating cyber threats 3. Continuously improving technological protection processes We are seeking an **SOC Analyst** to monitor, detect, and respond to information security incidents. This professional will be responsible for analyzing security events, investigating potential threats, and supporting the continuous improvement of the company’s technological environment protection processes. Responsibilities * Monitor security events and alerts using **SIEM** tools and other security platforms. * Identify, analyze, and respond to **cybersecurity incidents**. * Perform **log analysis**, network traffic analysis, and analysis of suspicious activities. * Escalate security incidents according to defined procedures. * Prepare **incident reports and security metrics**. * Support the implementation and improvement of **incident response processes**. * Collaborate with **infrastructure, network, and security teams** to mitigate risks. * Contribute to the creation and updating of **security playbooks**. Requirements * Degree in **Information Technology, Information Security, Networking, or related fields**. * Knowledge of **security monitoring and log analysis**. * Experience with **SIEM tools (e.g., Splunk, QRadar, Sentinel, ArcSight)**. * Familiarity with **networking concepts, protocols (TCP/IP, DNS, HTTP)**, and operating systems (**Windows/Linux**). * Basic knowledge of **security frameworks (MITRE ATT&CK, NIST, ISO 27001\)**. * Ability to investigate and analyze incidents. Preferred Qualifications * Certifications such as **Security\+, CEH, CySA\+, SC\-200 or similar**. * Experience with **EDR/XDR, SOAR, or Threat Intelligence**. * Knowledge of **scripting (Python, PowerShell, or Bash)**. * Experience in **24x7 SOC environments**.