Cyber Defence Analyst

Our requirements

• Minimum qualifications
• 3+ years in a SOC, security operations, IT operations or incident-response support role.
• Working understanding of Windows, Linux, networking, cloud, identity and security monitoring concepts.
• Experience with ticketing/case management and disciplined documentation.
• Strong analytical, prioritization and communication skills.

Optional

• Experience with SentinelOne, Microsoft Defender, Google SecOps, ReliaQuest GreyMatter, Abnormal Security or ServiceNow.
• Security+, CySA+, SC-200 or equivalent.
• Basic PowerShell, Python or KQL.

Your responsibilities

• Monitor and triage alerts from EDR, SIEM, MDR, email, cloud, identity and other security platforms.
• Validate suspicious activity, classify severity, collect initial evidence and escalate according to defined procedures.
• Create and maintain accurate cases, actions, timelines, indicators, affected assets and stakeholder communications.
• Support containment, eradication and recovery tasks under direction of incident responders.
• Perform basic log, endpoint, identity and email analysis and document investigation findings.
• Enrich alerts with threat intelligence and map observed behavior to MITRE ATT&CK.
• Identify repeat alerts and false positives and recommend tuning or automation opportunities.
• Maintain shift/on-call readiness, handover notes and operational dashboards.
• Participate in tabletop exercises, training, threat hunts and post-incident reviews.

What we offer

• Permanent employment contract.
• Private healthcare package with Luxmed
• Life insurance with Unum
• MyBenefit cafeteria platform
• Real career growth and learning opportunities within a global organization

Recruitment for