SOC Analyst (L2) - Lisbon, Hybrid

• Minimum of 2/3 years of experience in a SOC environment in security monitoring, investigation, and incident response roles;
• Ability to analyze intrusion events/attempts and define/apply mitigation measures;
• Good interpretation of the Cybersecurity context, actors, and techniques, tactics, and procedures;
• Good knowledge of SIEM platforms (e.g., Splunk);
• Know-how of operating systems (Linux, Windows, etc.);
• High-level development skills (shell scripting, python, c, or similar);
• High knowledge of the Cybersecurity context, actors, and techniques, tactics, and procedures;
• Knowledge of threat hunting and digital forensic analysis.

Noesis is looking for professionals to join its Cloud & Security area in Lisbon to join one of the reference SOC teams in Portugal, with the following profile:

• Proactive monitoring of intrusions, attacks, and anomalous behavior patterns;
• Investigation and enrichment of security events;
• Risk mitigation through rapid remediation mechanisms;
• Coordination of incident response together with other operational areas and external entities;
• Optimization of cyber defense processes, ensuring detection effectiveness and the production of appropriate KPIs;
• Review of data sources and use cases;
• Threat hunting based on available sources;
• Forensic investigation and post-mortem of security incidents;
• Monitoring of risk associated with vulnerabilities, attack techniques, tactics, and procedures, and triggering visibility and mitigation measures.

Work model: Lisbon, hybrid (2/3 times per week in the office) and remote during prevention week.