Security Operations Center (SOC) Analyst (Poznań - hybrid)

Analisi del mercato

Dettagli

Gratis, dopo l'accesso.

Candidati

Carica il tuo CV: datori di lavoro e recruiter di diversi paesi che cercano il tuo profilo potranno contattarti direttamente.

Descrizione

Security Monitoring & Alert Triage Use CrowdStrike Falcon Next-Gen SIEM as the primary platform for real-time monitoring, query-based analysis, detection review, event correlation, case management, and reporting. Review, prioritize, and classify alerts using the established severity matrix and SOC operating procedures. Determine whether alerts represent false positives, benign activity, suspicious activity, policy violations, or potential security incidents. Conduct triage, detailed investigation, evidence review, response coordination, and closure documentation for assigned alerts and incidents. Analyze and interpret first-party detections, third-party detections, and correlation rule outputs. Maintain accurate triage decisions, evidence notes, and investigation updates in the incident management platform. Incident Response & Remediation Ensure incidents are handled promptly in line with SOC runbooks, escalation workflows, and operational expectations. Execute approved Cybersecurity Incident Response Plan activities and associated SOC playbooks. Support containment, eradication, and recovery activities in coordination with IT resolver teams, platform engineering, IAM, network security, email security, and infrastructure teams. Escalate confirmed major incidents to CSIRT or management stakeholders when escalation criteria are met. Assist with root cause analysis documentation for major incidents, repeat incidents, or incidents requiring formal review. Threat Analysis & Contin

Descrizione completa, azienda e link per candidarti: dopo l'accesso. Accedi

I contatti del datore di lavoro (email/telefono/telegram) sono nascosti nell'anteprima pubblica. Invia il tuo CV così i datori di lavoro possono contattarti direttamente.