Senior SOC Analyst – Cloud and Threat Response (Cybersecurity)

Location: Remote in Poland or Portugal; candidates from across Europe with an existing legal right to work in the European Union

Company

hirify.global provides this opportunity with an international cybersecurity organization protecting essential infrastructure and digital assets.

What you will do

• Monitor and validate security alerts across Elastic SIEM, Darktrace, and CrowdStrike Falcon.
• Investigate verified incidents by correlating logs, cloud events, and network telemetry to determine attack origins and impact.
• Analyze cloud workload anomalies and security posture using Amazon GuardDuty, Security Hub, Inspector, and CloudTrail.
• Develop security use cases, automate workflows, and improve operational efficiency with Cortex SOAR and AWS tools.
• Execute containment and remediation actions, including host isolation, blocking, and revoking cloud credentials.
• Document findings and containment steps, and escalate critical incidents through ticketing systems.

Requirements

• At least 4 years of experience in cybersecurity, SOC operations, or threat analysis.
• Proficiency with Elastic SIEM, Darktrace, CrowdStrike Falcon, and AWS native security services.
• Strong analytical, troubleshooting, and root cause analysis skills.
• Hands-on experience with incident response and threat containment.
• Ability to develop automation workflows and optimize security operations.
• Fluent English with excellent written and verbal communication skills; existing legal right to work in the European Union required.

Nice to have

• CISSP, CISA, CEH, or AWS Security Specialty certification.
• Experience working in international or hybrid security environments.

Culture & Benefits

• Remote work with flexibility in Poland and Portugal.
• Work with an international cybersecurity organization focused on essential infrastructure and digital asset protection.
• Opportunity to contribute to an innovation-driven security team.
• Professional growth in cloud security, threat response, and security automation.