SOC Analyst

Summary

Join Telefónica Tech, a leading NextGen Tech solutions provider, as a Level 3 SOC Analyst and contribute to the security of the organization's networks, systems, and data. You will be responsible for expert-level analysis and response to security incidents and threats, working closely with Level 1 and Level 2 analysts to investigate and remediate security incidents. Your expertise in cybersecurity principles and best practices, along with your deep knowledge of Palo Alto Cortex and/or XSIAM, will be crucial in ensuring the organization's security. You will also be expected to stay up-to-date on the latest threats and trends in the cybersecurity landscape and provide guidance and support to junior team members.

Requirements

• At least experience working in a security operations centre or similar environment
• Strong knowledge of cybersecurity principles and best practices
• Deep practical knowledge of Palo Alto Cortex and/or XSIAM
• Some experience working with Microsoft Sentinel and/or CrowdStrike Falcon
• Ability to work independently and as part of a team
• Excellent communication skills, with the ability to explain complex technical issues to non-technical stakeholders

Responsibilities

• Perform advanced analysis of security events and alerts, using a combination of manual techniques and automated tools to identify potential security incidents
• Provide expert guidance and support to Level 1 and Level 2 analysts in the investigation and remediation of security incidents
• Use Cortex, Falcon, Microsoft Sentinel, Defender for Endpoint, Tenable IO, Defender Threat Hunting, and OpenCTI to perform threat hunting and identify potential security risks
• Work closely with other members of the SOC team to develop and implement new security policies and procedures, as needed
• Stay up-to-date on the latest cybersecurity threats and trends, and provide regular updates and recommendations to senior management
• Participate in incident response activities, including on-call rotations, and provide expert-level support during major security incidents