Cyber Defense Analyst – SOC & Cloud Security

About the role

As a Cyber Defense Analyst you will work closely with IT and network teams to configure, monitor, and maintain security tools that protect the organization’s infrastructure, endpoints, and cloud environments. You will play a key part in detecting threats, triaging alerts, and supporting incident response.

Key responsibilities

• Monitor, support, and configure SIEM and endpoint security platforms (e.g., Microsoft Sentinel, Stellar Cyber, SentinelOne, Cortex XDR).
• Correlate events across endpoints, networks, identity systems, and cloud workloads.
• Conduct initial analysis, triage, and escalation of security alerts following SOC procedures.
• Fine‑tune detection rules to improve alert accuracy and response efficiency.
• Provide technical support for security infrastructure (Fortinet, Palo Alto) and network controls.
• Review logs and network activity to identify suspicious behavior or misconfigurations.
• Collaborate with infrastructure teams to maintain secure network architecture.
• Support identity protection tools, analyze authentication patterns, and enforce MFA/conditional access policies.
• Validate endpoint compliance, agent health, and policy configuration across devices.
• Assist with containment actions during incidents and ensure cloud workloads send logs to monitoring platforms.

Required profile

• Bachelor’s degree in Computer Science, Software Engineering, Computer Engineering or equivalent experience.
• At least 1 year of hands‑on experience in a cybersecurity or SOC role.
• Relevant certifications such as CompTIA Security+, Certified SOC Analyst, or EC‑Council Certified Incident Handler are a plus.
• Strong analytical, critical‑thinking, and written communication skills.
• Ability to work independently under pressure while maintaining attention to detail.
• Advanced English proficiency.

Required skills

• SIEM platforms: Microsoft Sentinel, Stellar Cyber, Google SecOps.
• EDR/XDR tools: SentinelOne, Microsoft Defender, Cortex XDR.
• Security infrastructure: Fortinet, Palo Alto Networks.
• IAM concepts and tools: Microsoft Entra ID.
• Cloud environments: Google Cloud Platform, Microsoft Azure.
• Scripting/querying: PowerShell, Python, KQL.
• Familiarity with MITRE ATT&CK framework, incident response, and threat detection.
• Experience with ManageEngine and Microsoft security products.