About the Company

We are a technology-driven organisation committed to protecting digital infrastructure, business applications, and sensitive information from evolving cyber threats. Our security team combines modern monitoring technologies, structured incident response procedures, and continuous threat analysis to maintain a resilient security environment.

We are seeking a proactive SOC Analyst to monitor security events, investigate suspicious activities, and support incident response across our corporate and cloud environments.

Role Overview

The SOC Analyst will be responsible for monitoring security alerts, analysing potential threats, investigating incidents, and escalating confirmed risks in accordance with established security procedures. The successful candidate will work closely with infrastructure, engineering, and compliance teams to strengthen threat detection and reduce organisational exposure.

Key Responsibilities

• Monitor security alerts and events through Security Information and Event Management (SIEM) platforms.
• Investigate suspicious login attempts, malware alerts, endpoint activity, and potential unauthorised access.
• Perform initial triage, severity classification, and escalation of security incidents.
• Analyse logs from endpoints, networks, servers, and cloud services to identify indicators of compromise.
• Support incident containment, eradication, recovery, and post-incident documentation.
• Maintain accurate incident records, investigation notes, and shift handover reports.
• Identify recurring alert patterns and recommend improvements to detection rules.
• Collaborate with IT and engineering teams to remediate vulnerabilities and security weaknesses.
• Contribute to threat intelligence reviews and the continuous improvement of SOC procedures.

Requirements and Qualifications

• Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, or equivalent practical experience.
• At least 2 years of experience in a SOC, security monitoring, incident response, or related cybersecurity role.
• Practical knowledge of SIEM tools such as Microsoft Sentinel, Splunk, IBM QRadar, or comparable platforms.
• Understanding of TCP/IP, DNS, HTTP/S, authentication protocols, firewalls, and endpoint security.
• Familiarity with Windows and Linux logs, common attack techniques, and incident investigation methods.
• Knowledge of MITRE ATT&CK, the incident response lifecycle, and basic threat intelligence concepts.
• Strong analytical, documentation, communication, and problem-solving skills.
• Relevant certifications such as CompTIA Security+, CySA+, SC-200, or equivalent are advantageous.
• Ability to work independently in a fully remote environment and participate in a rotating shift schedule if required.

What We Offer

• Fully remote working arrangement within the agreed employment eligibility area.
• Competitive salary based on experience and technical expertise.
• Professional development opportunities and support for relevant cybersecurity certifications.
• Access to modern security monitoring and investigation tools.
• Collaborative security team with opportunities to develop incident response expertise.
• Paid annual leave and other benefits in accordance with company policy and applicable employment requirements.

Application Instructions

Interested candidates should submit an up-to-date CV highlighting their SOC experience, security monitoring tools, incident investigation skills, and relevant certifications. Include a brief summary of a security incident or investigation you have handled, where possible without disclosing confidential information.

Applications will be reviewed based on relevant experience, technical capabilities, and suitability for the role.

Are you interested in this position?

Apply by clicking on the “Apply Now” Button below!

#JobsHubEstonia #GlobalRecruitment
#CareerOpportunities #HiringNow
#JobSeekersNetwork #EstoniaJobs
#RecruitmentServices #EmploymentPortal.