Senior SOC Analyst (Cloud & Threat Response)

Quick Facts

• Role: Senior SOC Analyst (Cloud & Threat Response)

• Work model: Remote

• Regions: Poland and Portugal

Description

Monitor, investigate, and respond to advanced cyber threats across multi-cloud environments. Use security monitoring and cloud-native tooling to validate alerts, correlate incident evidence, and execute containment actions. Improve security operations by developing security use cases and automating response workflows.

Responsibilities

• Monitor security alerts across multiple platforms (Elastic SIEM, Darktrace, CrowdStrike Falcon) and validate genuine threats.

• Investigate verified security incidents by correlating logs, cloud events, and network telemetry to determine origin and impact.

• Monitor and analyze anomalies in cloud workloads using AWS native tools (GuardDuty, Security Hub, Inspector, CloudTrail).

• Develop and optimize security use cases and automate workflows to improve operational efficiency using Cortex SOAR and AWS tools.

• Execute containment and remediation actions (e.g., isolate hosts, deploy blocks, revoke cloud access credentials) according to procedures.

• Document findings and containment steps and escalate critical incidents in ticketing systems for continuous oversight.

Requirements

• At least 4 years of experience in cybersecurity, SOC operations, or threat analysis.

• Proficiency with security monitoring tools: Elastic SIEM, Darktrace, CrowdStrike Falcon, and AWS native security services.

• Strong analytical and troubleshooting skills, including root cause analysis under pressure.

• Hands-on incident response and threat containment experience.

• Ability to develop automation workflows and optimize security operations.

• Fluent English with excellent written and verbal communication skills.

• Legal right to work in the European Union.

Benefits

• Remote opportunity with flexible work in Poland and Portugal.

• Growth in a dynamic, innovation-driven security team.

• Work with cutting-edge security technologies across multi-cloud environments.