About the Company

We are a security-focused organisation working to identify, investigate, and prevent advanced cyber threats across complex digital environments. Our approach combines security analytics, threat intelligence, proactive hunting, and detection engineering to improve visibility and strengthen our overall defensive capabilities.

We are looking for a technically curious SOC Analyst specialising in threat hunting and detection engineering to help identify hidden threats and improve the effectiveness of our security monitoring systems.

Role Overview

The SOC Analyst will investigate threat hypotheses, analyse security telemetry, develop and refine detection logic, and identify suspicious behaviour that may not trigger standard alerts. This position is suited to a cybersecurity professional who enjoys working with logs, attack techniques, threat intelligence, and analytical security tools.

Key Responsibilities

• Conduct proactive threat-hunting activities across endpoint, network, identity, and cloud telemetry.
• Develop and refine detection rules, queries, and alert logic using SIEM and Extended Detection and Response (XDR) platforms.
• Analyse suspicious patterns, anomalous behaviour, and indicators associated with emerging attack techniques.
• Use MITRE ATT&CK to map observed behaviours to adversary tactics and techniques.
• Develop threat hypotheses based on intelligence reports, recent incidents, and environmental risk indicators.
• Investigate potential compromises involving credential abuse, lateral movement, persistence, and data exfiltration.
• Reduce false positives through detection tuning, alert enrichment, and improved correlation logic.
• Collaborate with incident responders and security engineers to translate investigation findings into actionable detections.
• Maintain technical documentation covering hunting methodologies, detection logic, and investigation outcomes.
• Track emerging threats and recommend improvements to the organisation’s detection coverage.

Requirements and Qualifications

• Degree in Cybersecurity, Computer Science, Information Technology, or equivalent professional experience.
• At least 3 years of experience in security operations, threat hunting, incident investigation, or detection engineering.
• Strong experience with SIEM or XDR platforms such as Microsoft Sentinel, Splunk, Microsoft Defender, or similar solutions.
• Practical knowledge of Kusto Query Language (KQL), SPL, SQL, or comparable query languages.
• Understanding of endpoint telemetry, Windows event logs, Linux system logs, identity events, and network traffic.
• Familiarity with threat intelligence, adversary tradecraft, and common attack frameworks.
• Experience developing or tuning detection rules and analysing alert effectiveness.
• Scripting knowledge in Python or PowerShell is an advantage.
• Strong investigative thinking, attention to detail, and the ability to communicate technical findings clearly.
• Certifications such as GCIA, GCIH, GCED, SC-200, or equivalent are beneficial.

What We Offer

• Fully remote work with agreed employment arrangements for Estonia-based candidates.
• Competitive remuneration aligned with experience and technical skills.
• Dedicated time for threat research, professional learning, and technical experimentation.
• Access to modern security analytics and detection technologies.
• Opportunities to contribute to security strategy and improve organisational threat visibility.
• Support for relevant training, certifications, and career progression.
• Paid annual leave and benefits in line with company policy and applicable employment requirements.

Application Instructions

Submit your CV with details of your threat-hunting experience, detection engineering work, SIEM query development, and relevant certifications. Candidates may also include examples of detection use cases or investigations they have contributed to, provided all sensitive information is removed.

Shortlisted applicants may be invited to complete a practical exercise involving log analysis, threat investigation, or detection-rule development.

Are you interested in this position?

Apply by clicking on the “Apply Now” Button below!

#JobsHubEstonia #GlobalRecruitment
#CareerOpportunities #HiringNow
#JobSeekersNetwork #EstoniaJobs
#RecruitmentServices #EmploymentPortal.