Handling initial information security incidents, with a focus on triaging alerts generated by monitoring tools and supporting users. The professional will be responsible for performing initial analyses, applying first-level procedures, and supporting the incident handling workflow within the SOC. ### **Responsibilities** * Analyze and classify alerts generated by SIEM tools * Respond to user tickets related to security (e.g., phishing, spam, device usage, and access) * Collect evidence and execute initial incident response procedures * Escalate tickets to higher levels when necessary * Document support interactions, procedures, and ticket updates ### **Requirements** * Basic knowledge of SIEM and incident response processes * Familiarity with EDR/XDR solutions (e.g., Trend Micro) * Basic understanding of suspicious email analysis (phishing) * Knowledge of Windows operating systems **Desirable** * CompTIA Security+ certification or introductory security courses * Basic knowledge of security monitoring tools * Initial experience in SOC environments **Differentiators** * Knowledge of offensive security techniques (Red Team) * Participation in platforms such as Hack The Box or TryHackMe
João Silva
Indeed · HR
João Silva
Indeed · HR
