Cyber Defense Analyst

About the role

We are looking for a proactive Cyber Defense Analyst to join Applaudo’s security operations team. You will work closely with IT and network groups to configure, monitor and maintain security tools that protect our infrastructure, endpoints and cloud environments.

Key responsibilities

• Monitor, support and configure SIEM and endpoint security platforms to detect potential threats.
• Correlate events across endpoints, networks, identity systems and cloud workloads.
• Perform initial analysis, triage and escalation of security alerts following SOC procedures.
• Fine‑tune detection rules to improve alert accuracy and response efficiency.
• Provide technical support for security infrastructure, firewalls and network controls.
• Review logs and network activity to identify suspicious behavior or misconfigurations.
• Assist with identity protection, access monitoring and enforcement of MFA/conditional access policies.
• Validate endpoint compliance, agent health and policy configuration across devices.
• Support cloud security controls and ensure log collection from cloud workloads.
• Document incidents and contribute to incident response actions.

Required profile

• Bachelor’s degree in Computer Science, Software Engineering, Computer Engineering or related field, or equivalent experience.
• At least 1 year of hands‑on experience in a cybersecurity or SOC role.
• Strong analytical, critical thinking and communication skills.
• Ability to work independently under pressure while maintaining attention to detail.
• Advanced English proficiency.

Required skills

• Experience with SIEM platforms such as Microsoft Sentinel, Stellar Cyber or Google SecOps.
• Familiarity with EDR/XDR tools like SentinelOne, Microsoft Defender or Cortex XDR.
• Knowledge of security infrastructure configuration (Fortinet, Palo Alto).
• Understanding of IAM concepts, especially Microsoft Entra ID.
• Experience with cloud environments (Google Cloud Platform, Azure).
• Basic scripting or query skills in PowerShell, Python and KQL.
• Desirable certifications: CompTIA Security+, Certified SOC Analyst, EC‑Council Certified Incident Handler.