24/7 monitoring and triage across SIEM/EDR/cloud tooling; assess alerts and severity.
Initial investigation: gather logs/telemetry, add context, document findings.
Escalate confirmed incidents to L2/IR with complete handoff.
Runbook execution: follow SOPs for phishing, logins, endpoint detections, containment.
Threat-aware analysis mapping alerts to MITRE ATT&CK techniques.
Operational hygiene: handovers, watchlists, notes, pattern tuning.

🎯 Requirements

0–2 years in SOC/security monitoring or IT operations.
Security fundamentals: networking, DNS, HTTP(S), identity, malware basics.
Familiarity with log investigation and event triage.
Familiarity with SIEM/EDR/ticketing tools and basic SOAR.
Strong written communication for escalation-ready tickets.
Willingness to work rotating shifts/on-call, weekends/holidays.

🎁 Benefits

Work in a fast-moving, globally distributed environment.
Culture that values ownership, learning, and continuous improvement.

Apply on employer's website

This employer gathers applications via their own applicant tracking system.

You will be redirected to an external application form.

Share job

Meet JobCopilot: Your Personal AI Job Hunter

Automatically Apply to Operations Jobs. Just set your preferences and Job Copilot will do the rest — finding, filtering, and applying while you focus on what matters.

Activate JobCopilot