-
Job Description
Security Operations Center (SOC) Analyst
As a SOC analyst, you'll be the first line of defense against potential security threats. You'll receive alerts with all relevant information, including the attacker's IP address, location, and context. Your task is to quickly assess the situation and make informed decisions to mitigate the threat.
About the Role
- Automate investigative workflows using an orchestration framework written in Python to improve SOC analyst efficiency.
- Design detection and response solutions to drive value and efficiency in Expel's Workbench platform.
- Collaborate with engineering on Expel's integrations and engineering standards associated with each class of integration.
- Evaluate technology APIs to design detection and response solutions.
- Contribute to a culture of experimentation, agile, quality, and continuous improvement among the team.
- Take a leading role in the team's research and monitoring of the latest threat landscape and subsequent detection and response automation development.
- Mentor less experienced team members and SOC analysts.
About the Company
Expel is a fast-growing cybersecurity company that's passionate about keeping customers safe and security analysts happy. We're innovating while handling the combinatorial explosion, and we believe it's a captivating problem.
Requirements
- 3+ years of experience with detection and response tools, particularly EDR, NSM, and SIEM.
- 3+ years of experience writing, deploying, and tuning custom detections based on research or investigative work against common data sets.
- Proficiency in Python, Go, or other object-oriented programming languages.
- Strong understanding of Windows, macOS, and Linux operating systems and command line tools.
- Knowledge of networking basics, such as TCP/IP and OSI model.
- Expert knowledge and observations of attack vectors, threat tactics, and attacker techniques.
- Intermediate knowledge of cloud infrastructure platforms and their Identity and Access Management (IAM) models.
- Cursory understanding of common Software-as-a-Service (SaaS) applications and available security signal.
- Bachelor's degree in Computer Science or Information Security strongly preferred.
What We Offer
- Competitive salary range: €85,700 EUR to €124,300 EUR + bonus eligibility and equity.
- Unlimited PTO (which we model and encourage).
- Work location flexibility.
- Up to 24 weeks of parental leave.
- Really excellent health benefits.