Security Operations Center (SOC) Analyst (Poznań - hybrid)

Análisis del mercado

Detalles

Gratis, tras iniciar sesión.

Postular

Sube tu CV: empleadores y reclutadores de distintos países que buscan tu perfil podrán contactarte directamente.

Descripción

Security Monitoring & Alert Triage Use CrowdStrike Falcon Next-Gen SIEM as the primary platform for real-time monitoring, query-based analysis, detection review, event correlation, case management, and reporting. Review, prioritize, and classify alerts using the established severity matrix and SOC operating procedures. Determine whether alerts represent false positives, benign activity, suspicious activity, policy violations, or potential security incidents. Conduct triage, detailed investigation, evidence review, response coordination, and closure documentation for assigned alerts and incidents. Analyze and interpret first-party detections, third-party detections, and correlation rule outputs. Maintain accurate triage decisions, evidence notes, and investigation updates in the incident management platform. Incident Response & Remediation Ensure incidents are handled promptly in line with SOC runbooks, escalation workflows, and operational expectations. Execute approved Cybersecurity Incident Response Plan activities and associated SOC playbooks. Support containment, eradication, and recovery activities in coordination with IT resolver teams, platform engineering, IAM, network security, email security, and infrastructure teams. Escalate confirmed major incidents to CSIRT or management stakeholders when escalation criteria are met. Assist with root cause analysis documentation for major incidents, repeat incidents, or incidents requiring formal review. Threat Analysis & Contin

Descripción completa, empresa y enlace para postular: después de iniciar sesión. Iniciar sesión

Los contactos del empleador (correo/teléfono/telegram) están ocultos en la vista previa pública. Envía tu CV para que los empleadores puedan contactarte directamente.