Security Operations Center (SOC) Analyst (Poznań - hybrid)

Analyses du marché

Détails

Gratuit, après connexion.

Postuler

Déposez votre CV : des employeurs et recruteurs de différents pays qui cherchent votre profil pourront vous contacter directement.

Description

Security Monitoring & Alert Triage Use CrowdStrike Falcon Next-Gen SIEM as the primary platform for real-time monitoring, query-based analysis, detection review, event correlation, case management, and reporting. Review, prioritize, and classify alerts using the established severity matrix and SOC operating procedures. Determine whether alerts represent false positives, benign activity, suspicious activity, policy violations, or potential security incidents. Conduct triage, detailed investigation, evidence review, response coordination, and closure documentation for assigned alerts and incidents. Analyze and interpret first-party detections, third-party detections, and correlation rule outputs. Maintain accurate triage decisions, evidence notes, and investigation updates in the incident management platform. Incident Response & Remediation Ensure incidents are handled promptly in line with SOC runbooks, escalation workflows, and operational expectations. Execute approved Cybersecurity Incident Response Plan activities and associated SOC playbooks. Support containment, eradication, and recovery activities in coordination with IT resolver teams, platform engineering, IAM, network security, email security, and infrastructure teams. Escalate confirmed major incidents to CSIRT or management stakeholders when escalation criteria are met. Assist with root cause analysis documentation for major incidents, repeat incidents, or incidents requiring formal review. Threat Analysis & Contin

Description complète, entreprise et lien pour postuler : après connexion. Se connecter

Les contacts de l'employeur (e-mail/téléphone/telegram) sont masqués dans l'aperçu public. Envoyez votre CV pour que les employeurs puissent vous contacter directement.