We are looking for a senior SOC analyst to monitor, investigate, and respond to cyber security events while continuously enhancing the organization's detection and response capabilities.The role serves as an experienced technical analyst responsible for threat detection, incident investigation, and operational improvements across the SOC.Tasks

• Monitor, investigate, and respond to security alerts and incidents using Cortex XSIAM and Cortex XDR
• Lead complex investigations, incident response activities, and root cause analysis
• Conduct proactive threat hunting across endpoints, identities, cloud, and network environments
• Develop and optimize detection rules, correlations, and use cases to improve threat visibility
• Act as an escalation point for high-priority incidents and challenging investigations
• Support malware analysis, forensic investigations, and incident reconstruction
• Drive automation and orchestration initiatives using Cortex XSOAR
• Develop and maintain SOC playbooks, response procedures, and operational standards
• Support reporting, security metrics, and continuous improvement of SOC processes and detection capabilitiesBenefits
• Mentoring
• Vacation / Christmas bonus
• Special deals with selected partners
• Employee events
• Hybrid working possible
• Flexible working hoursRequirements
• 5 years of hands-on SOC experienceExperience With
• Palo Alto Cortex XDR
• Palo Alto Cortex XSIAM
• SIEM technologies (Splunk experience highly valued)Strong understanding of:Incident ResponseThreat DetectionEndpoint SecurityNetwork SecurityIdentity-based attacksExperience analyzing:
• Malware Phishing campaigns
• Account compromise incidents
• Lateral movement
• Insider threats
• Ability to interpret logs from multiple security technologies
• Strong analytical and investigative mindsetNice to Have
• Cortex XSOAR
• Threat Hunting and Threat Intelligence
• Digital Forensics and Malware Analysis
• MITRE ATT&CK
• Python or PowerShell scriptingWorking Model
• Shift work preferred (flexible based on SOC operating model)
• Participation in on-call and incident response rotations required

We are looking for a senior SOC analyst to monitor, investigate, and respond to cyber security events while continuously enhancing the organization's detection and response capabilities.The role serves as an experienced technical analyst responsible for threat detection, incident investigation, and operational improvements across the SOC.Tasks

• Monitor, investigate, and respond to security alerts and incidents using Cortex XSIAM and Cortex XDR
• Lead complex investigations, incident response activities, and root cause analysis
• Conduct proactive threat hunting across endpoints, identities, cloud, and network environments
• Develop and optimize detection rules, correlations, and use cases to improve threat visibility
• Act as an escalation point for high-priority incidents and challenging investigations
• Support malware analysis, forensic investigations, and incident reconstruction
• Drive automation and orchestration initiatives using Cortex XSOAR
• Develop and maintain SOC playbooks, response procedures, and operational standards
• Support reporting, security metrics, and continuous improvement of SOC processes and detection capabilitiesBenefits
• Mentoring
• Vacation / Christmas bonus
• Special deals with selected partners
• Employee events
• Hybrid working possible
• Flexible working hoursRequirements
• 5 years of hands-on SOC experienceExperience With
• Palo Alto Cortex XDR
• Palo Alto Cortex XSIAM
• SIEM technologies (Splunk experience highly valued)Strong understanding of:Incident ResponseThreat DetectionEndpoint SecurityNetwork SecurityIdentity-based attacksExperience analyzing:
• Malware Phishing campaigns
• Account compromise incidents
• Lateral movement
• Insider threats
• Ability to interpret logs from multiple security technologies
• Strong analytical and investigative mindsetNice to Have
• Cortex XSOAR
• Threat Hunting and Threat Intelligence
• Digital Forensics and Malware Analysis
• MITRE ATT&CK
• Python or PowerShell scriptingWorking Model
• Shift work preferred (flexible based on SOC operating model)
• Participation in on-call and incident response rotations required