SOC Analyst

About the role

A Cybersecurity Operations team is looking for a SOC Analyst at roughly mid-level experience. The role covers day-to-day security operations: analysing alerts and potential threats, investigating events detected by security tools, and supporting requests and communications with customers. The ideal candidate has solid foundational cybersecurity experience, technical curiosity, autonomy in finding information and a strong inclination toward problem solving.

Key responsibilities

• Analyze and manage security alerts and threats
• Investigate events through EDR consoles and other tools such as NDR and SIEM
• Research and correlate information about endpoints, processes and events
• Create and use queries to dig deeper into security events
• Analyze suspicious emails and potential phishing campaigns
• Interact professionally with customers
• Progressively take part in Incident Response activities
• Use AI tools to support analysis and research
• Collaborate with the rest of the team on SOC operations

Required profile

• Previous experience in cybersecurity or Security Operations
• Hands-on experience with at least one EDR platform and understanding of how it works
• Ability to analyze alerts and investigate them independently, and to carry out technical research
• Basic knowledge of phishing and suspicious email analysis
• Good written communication and customer relationship skills
• Excellent command of Italian
• Availability for on-call duty when required

Required skills

• EDR platforms
• NDR and SIEM tools
• Query building in security tools
• Familiarity with AI tools applied to cyber operations
• Preferred: Microsoft security technologies, SentinelOne, NDR solutions and other SOC tools

Candidates apply by sending their CV to the company's careers contact; only shortlisted candidates will be contacted for an interview.