Analyst – Security Operations Center

This advert was translated automatically from Portuguese. Read the original.

Proactively monitor security events, intrusions, attack attempts and anomalous behaviour patterns, using the platforms and information sources available in the Security Operations Center (SOC); Perform triage, investigation and enrichment of security alerts, validating events, identifying false positives and collecting relevant technical evidence; Respond to security incidents, performing analysis, mitigation and containment actions, in coordination with the relevant technical and cybersecurity teams; Operationally coordinate the (SOC) operators, ensuring the distribution, follow-up and prioritisation of cybersecurity event and incident monitoring, triage, investigation, initial response and escalation activities; Support vulnerability, exposure and indicators of compromise analysis, contributing to the identification of corrective and preventive measures; Create, maintain, review and improve playbooks, operational procedures and cybersecurity event and incident response instructions; Support the tuning of detection rules, correlation and use cases on SIEM and SOAR platforms, with a view to reducing false positives and strengthening detection capability; Produce technical reports, incident records, evidence, recommendations and contributions for operational and executive reporting; Contribute to the carrying out of exercises, simulations, incident response tests and initiatives for continuous improvement of the (SOC)'s operational maturity. Requirements Higher Education in the fields of Computer Engineering, Electrotechnical Engineering, Information Technology, Cybersecurity or a similar field; Professional experience in security monitoring, event analysis, alert investigation or incident response (preferred); Knowledge of Windows and Linux operating systems, networks, protocols and SIEM platforms; Knowledge of cybersecurity, vulnerability management, incident response and log analysis; Experience using monitoring, ticketing, reporting and collaboration tools; Driving Licence; Knowledge of English; Immediate availability (preferred). We Offer Permanent integration into a project of continuity; Continuous professional training; Social Benefits in force at the company.