Responsible for 24×7 security monitoring, initial alert triage, identification of suspicious activities, and timely escalation of potential security incidents to L2 analysts.
Responsibilities
Monitor security alerts and events across enterprise infrastructure using SIEM platforms.
Perform initial triage and validation of alerts to identify potential security threats.
Analyze security events from firewalls, IDS/IPS, EDR, antivirus, WAF, VPN, Active Directory, cloud, and network devices.
Perform initial triage and classification of incidents.
Escalate confirmed incidents to SOC L2 Analysts and/or Incident Response Team.
Consultant, Reactive Services is an individual contributor role within Unit 42, responsible for supporting digital forensics and incident response (DFIR) engagements across a wide range of client environments throughout Latin America.
Responsibilities
Support and execute digital forensics and incident response investigations across enterprise environments.
Conduct forensic analysis of endpoints, systems, logs, and cloud environments to identify attacker activity and scope of compromise.
Assist with host, network, and cloud investigations during active security incidents.
Perform forensic acquisition and preservation of evidence following industry best practices and chain-of-custody procedures.
Utilize industry-standard DFIR tools and methodologies to investigate malicious activity and support containment efforts.
Requirements
Bachelor's degree in Computer Science, Information Security, or related field, or equivalent practical experience.
Tier 2 Incident Response Analyst to support a law enforcement customer by monitoring tools, triaging alerts, and investigating potential cyber threats within a SOC team environment.
Compensation
The salary range for this position is typically between $110,000-$115,000.
Responsibilities
Utilize security tools to analyze, investigate, and triage security alerts
Monitor our customers environments, including cloud and SaaS solutions for evidence of adversarial activity
Perform in-depth analysis and investigation of high-priority cybersecurity incidents
Utilize advanced tools, such as host based digital forensics or malware analysis capabilities, to identify incidents’ root causes, scope, and impact
Collaborate with cyber threat hunting and cyber threat intelligence teams
Requirements
Bachelor’s Degree or higher in Cybersecurity or related
The Junior Analyst, Security Operations is responsible for monitoring security events and conducting end-to-end investigations of assigned alerts and incidents, correlating evidence across endpoint, identity, email, network, and cloud environments to determine malicious activity.
Responsibilities
Monitor and analyze security alerts and events from security platforms
Assess credibility and urgency of security alerts
Investigate endpoint, identity, email, network, and cloud telemetry
Coordinate with relevant teams to address containment and remediation
Escalate incidents promptly when severity, complexity, or business impact exceeds expertise
Monitor, triage, and investigate security alerts and incidents across endpoint, network, identity, cloud, and application environments.
Compensation
Salary range (but not limited to):
80,700 - 98,700
Annual bonus target, based on the base salary, with a potential payout of up to double the target (subject to personal and company performance):
10%
Responsibilities
Monitor, triage, and investigate security alerts and incidents across endpoint, network, identity, cloud, and application environments.
Perform incident response activities, including containment, eradication, and post-incident follow-up.
Conduct in-depth analysis of security events using SIEM, EDR/XDR, network monitoring, email security, and vulnerability management tools.
Correlate logs and telemetry from multiple sources to identify attack patterns, root causes, and indicators of compromise.
Identify, assess and recommend information security solutions that meet the business and security needs.
Requirements
Bachelor’s degree in information technology, or any combination of equivalent education and experience
Analista SOC responsável por monitorar, investigar e responder a incidentes de segurança em uma infraestrutura crítica, coordenar operadores SOC e evoluir regras de detecção e playbooks.
Responsibilities
Monitorar eventos de segurança, intrusões e comportamentos anómalos
Triar, investigar e enriquecer alertas, identificando falsos positivos
Responder a incidentes com ações de análise, mitigação e contenção
Coordenar os operadores SOC e o escalonamento de incidentes
Afinar regras de detecção e use cases em SIEM/SOAR e manter playbooks atualizados
Requirements
Licenciatura em Engenharia Informática, Eletrotécnica, Tecnologias de Informação, Redes e Comunicações, Cibersegurança ou similar
Entry-level Security Operations Center (SOC) Analyst responsible for continuous monitoring, triage, and documentation of security events, supporting 24x7 coverage and incident response.
Compensation
Salary Range: $65K-$70K (based on experience)
Responsibilities
Monitor SIEM, EDR, IDS/IPS, firewall, email security, and other security tool consoles in real time for events that may point to an incident
Perform initial triage of alerts using established playbooks and SOPs, and determine whether each is a false positive, benign activity, or a potential incident
Escalate validated or suspected incidents to Tier 2 analysts and incident response staff on time, with the supporting evidence attached
Create, update, and close tickets in the case management system, with clear and accurate documentation of actions taken
Review user-reported phishing emails and suspicious activity reports, and perform basic analysis of headers, URLs, and attachments
Requirements
Bachelor's degree in Computer Science, Cybersecurity, Information Systems, or a related field
Nice to have: Hands-on experience with Microsoft Sentinel, SentinelOne, and Palo Alto XSOAR
Nice to have: Exposure to EDR tools such as CrowdStrike Falcon, Microsoft Defender for Endpoint, or SentinelOne
Nice to have: Additional certifications such as CompTIA CySA+, CompTIA Network+, GIAC GSEC, or Splunk Core Certified User
Lead and coordinate the end-to-end management of escalated security incidents, ensuring timely assessment, investigation, containment, remediation, recovery and closure.
Responsibilities
Lead and coordinate the end-to-end management of escalated security events and incidents
Coordinate cross-functional incident response activities involving the SOC, IT Operations, technical specialists and other relevant teams
Monitor technical investigations, containment, remediation and recovery activities
Act as the central coordination point for incident-related activities, facilitating discussions, decision-making and collaboration between technical teams, Legal, business representatives and senior management
Assess incident impact and associated risks, ensuring significant issues are appropriately escalated
Requirements
Nice to have: experience within a Security Operations Centre (SOC)
Nice to have: Incident Response Team
Nice to have: enterprise information security function
Nice to have: familiarity with security technologies such as SIEM, EDR/XDR
Claims Agent Cyber Insurance/Security SuportNewAllianz Trade · Agios Dimitrios, Greece
Tier 2 Incident Response AnalystQuantum Sky · Washington, US
Junior Analyst, Security OperationsSES · Bucharest, Romania
Cybersecurity AnalystMANTECH · Boulder, US