SOC analitikas (SOCaaS)

About the role

Mediafon Technology is looking for a SOC Analyst to join its SOCaaS team. You will monitor and analyse security events from multiple sources, identify real threats, and help protect client environments.

Key responsibilities

• Monitor security events from SIEM, EDR, and network devices and detect anomalies.
• Perform alert triage, identify Indicators of Compromise (IOCs), assess risk and provide incident context.
• Follow SOPs and playbooks, and contribute to their continuous improvement.
• Collaborate with SOC engineers and client teams to resolve incidents.
• Participate in SOC process automation and tool enhancement initiatives.

Required profile

• Higher IT education in information systems, cyber security or a related field.
• 1–2 years of experience in cyber security, IT infrastructure or system administration.
• Entry‑level cyber security certification (e.g., CompTIA Security+, Microsoft SC‑900/SC‑200, CEH entry, eJPT, Blue Team Level 1 or equivalent).

Required skills

• Understanding of TCP/IP, DNS, DHCP, HTTP/HTTPS and basic firewall concepts.
• Windows fundamentals: Event Viewer, Active Directory basics, PowerShell scripting.
• Linux basics (syslog, file structure, common commands) – preferred.
• Experience with at least one SIEM platform (Wazuh, Microsoft Sentinel, Splunk, QRadar).
• Ability to analyse logs, perform alert triage, identify false positives/negatives and work with MITRE ATT&CK.
• Basic knowledge of SOAR, Python or PowerShell scripting, cloud security (Azure/AWS), and EDR/XDR solutions (MS Defender, CrowdStrike, Check Point).

What we offer

• Hands‑on work with real incidents and fast career growth.
• Learning budget and certification support.
• Path to Mid‑level or Senior roles.
• AI‑driven tools integrated into daily work.
• Flexible work mode – office or hybrid.
• Competitive salary: €3,200–€4,200 per month (gross).