Вакансия из Hirify Global, списка международных tech-компаний Для мэтча и отклика нужен Plus
Пожаловаться
Зарплата и рынок
развернуть
$120к-145к/год
$110к$120кмедиана$130к
По похожим ролям (18) ~ $120к/год
75
Хорошая вакансия
развернуть
Четко описанная роль SOC-аналитика с понятными задачами и фокусом на зрелые процессы безопасности, однако ночной график работы является важным фактором для учета.
Ночные смены
Четкие обязанности
Зрелая среда
Мэтч & Сопровод
Для мэтча с этой вакансией нужен Plus
Подключить Plus
Описание вакансии
Текст:
Hirify AI/Оригинал
TL;DR
SOC Mid-Level Analyst (SIEM/SOAR): Monitoring SIEM systems and infrastructure to identify, analyze, and respond to security events and Indicators of Compromise with an accent on incident response, alert tuning, and security automation. Focus on conducting proactive threat hunting, building SIEM content, tuning SOAR playbooks, and improving detection and recovery processes in a mature 24x7x365 SOC.
Location: Remote; Sunday–Thursday, 12:00 AM–8:00 AM ET, subject to change
Salary: $120,000–$145,000 per year
Company
hirify.global operates in the cybersecurity domain and supports clients with security operations and incident response.
What you will do
Monitor SIEM systems, on-premises infrastructure, cloud applications, phishing inboxes, intelligence feeds, and incident queues for security events and intrusions.
Participate in critical incident response, including containment, remediation, recovery, and post-incident reviews.
Coordinate with SIEM engineering to tune events and alerts and improve alert fidelity.
Assist with creating and tuning SOAR playbooks and automated workflows.
Conduct proactive threat hunting and research emerging threats, vulnerabilities, and risks.
Work with Cyber Threat Intelligence, document detection patterns, and prepare threat-hunt reports for SOC leadership.
Requirements
Minimum 5 years of experience analyzing log data for intrusion analysis or information security operations.
Bachelor’s degree or equivalent with relevant certifications.
Experience with at least two analysis tools used in a CIRT or similar investigative environment.
Ability to build content in a SIEM system.
Ability to analyze and triage Indicators of Compromise.
Experience working in a mature 24x7x365 Security Operations Center.
Culture & Benefits
Fully remote work arrangement.
Full-time employment with benefits.
Opportunity to support challenging cybersecurity investigations and continuous learning.
Будьте осторожны
Если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого. Это мошенники. Обязательно жмите «Пожаловаться» или пишите в поддержку. Подробнее в гайде →