Soc Analyst

Incident Response and SOC Analyst

The role supports the Cyber Security Operations Centre for the EU critical infra...

Location

Belgium , Brussels

Salary:

Not provided

Sopra Steria

Expiration Date

Until further notice

Requirements

Strong incident response methodology and hands-on experience in end-to-end incident handling in multinational settings
Advanced knowledge of XSOAR playbook creation and automation
Proficiency in designing and adapting automated workflows and enrichment
Python programming skills
Ability to present technical and business information effectively to diverse EC stakeholders
High standards for incident documentation, KPI reporting, and compliance with security frameworks
Familiarity with cloud-native services (AWS, Azure), EDR, SIEM-SOAR platforms, and container security
Excellent communication skills for working in multicultural teams and liaising with technical and non-technical audiences
Certifications or experience in relevant security technologies (e.g., Palo Alto Cortex XSOAR, Splunk, Microsoft SC-200, AWS Security Specialty)
Level 6 European Qualification Framework (Bachelor's degree or higher) for senior profiles

Job Responsibility

Define incident handling procedures, automation requirements, and playbook logic aligned with the needs
Prepare incident response workflows, automated enrichment steps, and technical documentation for standardized alert handling
Handle cybersecurity incidents from detection through escalation, containment, and resolution
Develop and maintain XSOAR playbooks, integrations, and automations across platforms such as Splunk, AWS, Azure Sentinel, Carbon Black Cloud, and Sysdig
Coordinate and review playbook updates, incident reports, and cross-team collaboration
Report key performance metrics, including FPTP rate, MTTH, escalation rate, automation coverage, time saved, and error reductions
Assist training analysts on playbook usage and incident response methods
Collaborate with CSIRC, CATCH analysts, infrastructure teams, and external stakeholders to validate playbook coverage and share threat intelligence.

What we offer

Mobility options (including a company car)
Insurance coverage
Meal vouchers
Eco-cheques
Continuous learning opportunities through the Sopra Steria Academy
Participation in team events.

Fulltime

Principal Cybersecurity Incident Response Analyst

Principal Cybersecurity Incident Response Analyst role at HPE's Cyber Defense Ce...

Location

India , Bangalore

Salary:

Not provided

Hewlett Packard Enterprise

Expiration Date

Until further notice

Requirements

Bachelor's degree (or equivalent work experience) required, preferably in computer science, engineering or related area of study
Typically 8+ years of relevant experience
SOC team/Incident response/Advanced threat analyst experience is required
Proven track record of leading complex cybersecurity initiatives and managing ambiguous incidents
Extensive understanding of adversary tactics, techniques, and procedures (TTPs)
Extensive Cyber and IT security knowledge
Extensive understanding of Cyber and IT security risks, best practices, threats and prevention measures
Extensive understanding of SQL and relevant scripting languages
Extensive data security system analysis skills
Extensive risk assessment and management skills

Job Responsibility

Lead and coordinate responses to the most severe and complex cybersecurity incidents
Guide cross-functional teams through containment, eradication, and recovery
Provide executive-level oversight and decision-making during critical incidents
Effectively analyze associated logs and respond to high severity incidents
Contribute to the company's security response methods
Mentor and provide technical guidance to less experienced cybersecurity professionals
Stay at the forefront of cybersecurity trends, threats, and technologies
Foster a culture of continuous improvement and innovation
Provide insight and guidance through after action reviews

What we offer

Health & Wellbeing benefits
Personal & Professional Development programs
Unconditional Inclusion environment
Comprehensive benefits suite supporting physical, financial and emotional wellbeing

Fulltime

Senior Cybersecurity Incident Response Analyst

You will work as a Senior Cybersecurity Incident Response Analyst as part of Hew...

Location

Ireland , Galway

Salary:

Not provided

Hewlett Packard Enterprise

Expiration Date

Until further notice

Requirements

Bachelor's degree (or equivalent work experience) required, preferably in computer science, engineering or related area of study
typically 4+ years of relevant experience
SOC team/Incident response analyst experience is required
proven track record of leading complex cybersecurity initiatives and managing ambiguous incidents
advanced understanding of adversary tactics, techniques, and procedures (TTPs)
advanced Cyber and IT security knowledge
advanced understanding of Cyber and IT security risks, best practices, threats and prevention measures as well as containment and remediation actions
advanced understanding of SQL and relevant scripting languages
advanced data security system analysis skills
advanced risk assessment and management skills

Job Responsibility

Lead and coordinate responses to the most complex cybersecurity incidents, guiding cross-functional teams through containment, eradication, and recovery
analyze associated logs and respond to high severity incidents
suggest automation opportunities to enhance IR
mentor and provide technical guidance to less experienced cybersecurity professionals
stay at the forefront of cybersecurity trends, threats, and technologies
foster a culture of continuous improvement and innovation
encourage the adoption of new technologies and methodologies
provide insight and guidance through after action reviews working with stakeholders.

What we offer

Comprehensive suite of benefits supporting physical, financial and emotional wellbeing
programs for professional and personal career development
unconditional inclusion and flexibility to manage work and personal needs.

Fulltime

Cyber Security Soc Analyst

The SOC Analyst (L1/L2) and Lead are responsible for proactive monitoring, detec...

Location

India , Chennai

Salary:

Not provided

Sopra Steria

Expiration Date

Until further notice

Requirements

Strong knowledge of SIEM platforms and alert investigation
Advanced incident response, malware analysis, and RCA expertise
Deep knowledge of endpoint and network security tools
Threat hunting and forensic investigation capabilities
Familiarity with vulnerability management and DLP/email security
Experience with threat intelligence platforms and TTP mapping
Strong analytical, communication, and documentation skills
Guide development of SOC procedures/runbooks and continuous improvement initiatives
Administer DLP and email security systems
Operate Microsoft Defender for Endpoint, conduct threat hunting via EDR telemetry and memory dumps

Job Responsibility

Proactive monitoring, detection, investigation, and response to security threats using industry-leading solutions
Guide and architect SOC workflows and systems to ensure robust organizational security
Threat hunting and forensic investigation
Administer DLP and email security systems
Operate Microsoft Defender for Endpoint, conduct threat hunting via EDR telemetry and memory dumps
Use, configure, and optimize SIEM tools (Splunk, IBM QRadar, Microsoft Sentinel, LogRhythm, ArcSight, Elastic SIEM) for threat identification and alert management
Guide development of SOC procedures/runbooks and continuous improvement initiatives
Leadership and team management

What we offer

Inclusive and respectful work environment
Positions open to people with disabilities

Fulltime

SOC Insider Threat Lead Analyst

SOC Insider Threat Lead Analyst position at Citi, responsible for monitoring, re...

Location

Singapore , Singapore

Salary:

Not provided

Citi

Expiration Date

Until further notice

Requirements

6+ years working in the security & operations fields
Bachelor's degree or higher (Computer Science or Cybersecurity preferred) or equivalent work experience
Excellent knowledge of network security, TCP/IP, various operating systems (Windows/UNIX), and web technologies
Ability to read and understand packet level data
Experience with user behavior analytics, DLP, IDS/IPS, firewalls, and host security products (HIPS, AV, EDR, etc)
Certifications from EC-Council, GIAC, or (ISC)² are preferred [CISSP, C|EH, GCIA, CCNA]
Good communication skills with the ability to articulate clearly in high stress situations
Skills and proficiency with MS PowerPoint, Excel, Access or other analytical tools

Job Responsibility

Perform monitoring, research, assessment and analysis on alerts from various security tools
Recommend and review new use cases for insider threat monitoring
Follow pre-defined actions to investigate security incidents or perform incident response actions
Execute daily ad hoc tasks or lead projects as needed
Participate in or lead daily and ad-hoc conference calls
Create, update or provide process documentation, or provide requested evidence for compliance & controls requests

Fulltime

Managed Cloud Detection and Response Analyst

Wiz is looking for a Managed Cloud Detection and Response Analyst to join our ne...

Location

Israel , Tel Aviv

Salary:

Not provided

Wiz

Expiration Date

Until further notice

Requirements

2+ years of experience in a Security Operations Center or Managed Detection and Response, specifically involving cloud environments
Solid knowledge in Cloud Security, with familiarity in cloud services, Kubernetes, cloud architecture, and major providers (AWS, GCP, Azure)
Strong analytical skills with a detail-oriented mindset, capable of assessing complex security incidents, separating false positives from true compromise, and providing actionable insights
Passion for continuous learning and improvement, staying up-to-date on the latest trends, threats, and best practices in cloud security
Excellent communication skills verbal and written both in Hebrew and English

Job Responsibility

Continuously monitor customers’ cloud environments and workloads for security alerts and analyze potential cyber threats to identify and prioritize cyber security incidents
Triage prioritized cyber incidents and coordinate appropriate response actions to mitigate risks effectively
Work closely with customer teams to guide and assist with investigation and remediation of incidents
Create and deliver incident reports that document findings and response actions taken for customers
Write and implement custom detection rules and fine-tune alerts to enhance threat detection capabilities for the customer’s specific cloud environment
Develop and maintain cyber incident response playbooks to standardize procedures and enhance the internal methodology of the team
Stay up to date with the latest threats, vulnerabilities, and trends in cloud security to update response strategies and improve detection methods

We are seeking a SOC Analyst to strengthen its cybersecurity operations. This ro...

Location

United States , Jersey City

Salary:

Not provided

Robert Half

Expiration Date

Until further notice

Requirements

Experience with SIEM tools (Sentinel, AlienVault) and EDR solutions (CrowdStrike, SentinelOne)
Strong knowledge of cloud security (AWS, Azure) and DevSecOps tools (Jenkins, GitHub, Kubernetes)
Proficiency in network protocols (TCP/IP, DNS, HTTP) and IAM solutions (Okta, Azure AD)
Hands-on experience with vulnerability management tools (Nessus, Metasploit)
Understanding of compliance frameworks (GDPR, HIPAA, PCI DSS)
Strong analytical and problem-solving abilities
Excellent communication skills with cross-functional teams
Proactive, detail-oriented, and thrives in a fast-paced environment
Bachelor's degree in Cybersecurity, IT, or a related field, or equivalent experience
3+ years in SOC/security operations

Job Responsibility

Monitoring & Incident Response – Analyze security logs, investigate alerts, contain threats, and collaborate with MTDR vendors on SIEM configuration
Threat Intelligence & Hunting – Leverage threat intelligence feeds, proactively hunt for security risks, and apply MITRE ATT&CK methodologies
Network & Endpoint Security – Secure firewalls, IDS/IPS, VPNs, and manage EDR solutions to protect enterprise assets
Cloud & Application Security – Conduct security assessments, enforce best practices in AWS, Azure, and Google Cloud, and automate security measures within CI/CD pipelines
IAM & Data Security – Monitor identity and access management (IAM) systems, detect unauthorized access, and implement encryption and DLP policies
Compliance & Risk Management – Support audits for GDPR, HIPAA, and NIST compliance while performing internal security checks
Reporting & Communication – Generate detailed reports, collaborate with IT, development, and management teams, and contribute to security awareness initiatives

What we offer

medical, vision, dental, and life and disability insurance
eligible to enroll in our company 401(k) plan

Fulltime

Senior Cybersecurity Analyst, Threat Hunter

Our cybersecurity and information security teams at IDEXX contribute to a more r...

Location

United States , Westbrook, Maine

Salary:

120000.00 - 140000.00 USD / Year

IDEXX

Expiration Date

Until further notice

Requirements

6–10 years of experience in cybersecurity roles
Minimum of 3 years dedicated specifically to threat hunting or advanced incident response
Bachelor’s degree in computer science, Cybersecurity, Information Technology, or a related field
Preferred certifications GCIH (GIAC Certified Incident Handler) and CompTIA CySA+ (Cybersecurity Analyst+) certification
Proven, hands-on experience using platform for EDR (Endpoint Detection and Response) and threat hunting
Expert-level knowledge of PowerShell Scripting, Python and EDR and SIEM query language is preferred
Deep understanding of incident response lifecycles, methodologies, and forensic techniques
Strong knowledge of networking protocols, operating systems (Windows, Linux, macOS), and common attack vectors
Familiarity with scripting languages (e.g., Python, PowerShell) for automation of hunting tasks is a plus
Exceptional analytical and problem-solving skills with keen attention to detail

Job Responsibility

Proactively hunt for indicators of compromise (IOCs) and advanced persistent threats (APTs) across the network, endpoints, and cloud environments using threat intelligence and a hypothesis-driven methodology
Conduct in-depth analysis of security events, network traffic, and endpoint data to identify malicious activity and potential breaches
Utilize the SIEM and EDR platform extensively, applying expert knowledge of the scripting, SIEM and EDR query language to perform complex searches and data analysis
Lead and participate in incident response activities, including containment, eradication, and recovery efforts, serving as a primary escalation point for critical security incidents
Develop and refine threat hunting playbooks, procedures, and detection rules to improve the security team’s efficiency and effectiveness
Collaborate with the security engineering and security operations center (SOC) teams to integrate new threat intelligence and enhance existing security tools and controls
Mentor junior analysts and contribute to the ongoing improvement of the organization's overall security posture

What we offer

Opportunity for annual cash bonus
Health / Dental / Vision Benefits Day-One
5% matching 401k
Additional benefits including but not limited to financial support, pet insurance, mental health resources, volunteer paid days off, employee stock program, foundation donation matching

Fulltime

Select Country

Soc Analyst - Incident Response

Randstad

Location:
Australia , Sydney

Category:
IT - Software Development

Contract Type:
Not provided

Salary:

Job Description:

Job Responsibility:

Requirements:

Additional Information:

Job Posted:
May 20, 2026

Expiration:
June 10, 2026

Looking for more opportunities? Search for other job offers that match your skills and interests.

Similar Jobs for Soc Analyst - Incident Response

Incident Response and SOC Analyst

Principal Cybersecurity Incident Response Analyst

Senior Cybersecurity Incident Response Analyst

Cyber Security Soc Analyst

SOC Insider Threat Lead Analyst

Managed Cloud Detection and Response Analyst

SOC Analyst

Senior Cybersecurity Analyst, Threat Hunter

Our AI answers in your language

Soc Analyst - Incident Response

Randstad

Location:Australia , Sydney

Category:IT - Software Development

Contract Type:Not provided

Salary:

Job Description:

Job Responsibility:

Requirements:

Additional Information:

Job Posted:May 20, 2026

Expiration:June 10, 2026

Looking for more opportunities? Search for other job offers that match your skills and interests.

Similar Jobs for Soc Analyst - Incident Response

Incident Response and SOC Analyst

Principal Cybersecurity Incident Response Analyst

Senior Cybersecurity Incident Response Analyst

Cyber Security Soc Analyst

SOC Insider Threat Lead Analyst

Managed Cloud Detection and Response Analyst

SOC Analyst

Senior Cybersecurity Analyst, Threat Hunter

Location:
Australia , Sydney

Category:
IT - Software Development

Contract Type:
Not provided

Job Posted:
May 20, 2026

Expiration:
June 10, 2026