Security Operations Center Analyst

Hace 3 días

Bogotá, Bogotá, Distrito Capital, Colombia Auxis Jornada completa $ 60 - $ 100/año

Sr. Security Operations Center (SOC) Analyst

Grant Thornton's Cyber Fusion Centre (CFC) is actively seeking a technically strong and motivated Sr. SOC Analyst to join our follow-the-sun security operations team. Operating in a "tierless" SOC model, you will have end-to-end ownership of the security operations lifecycle - from initial alert review and triage through investigation, containment, and continuous improvement.

What You Will Do

  • End-to-End Incident Ownership: Manage the full incident lifecycle, including real-time monitoring, triage, evidence review, response coordination, and closure.
  • Advanced Threat Detection: Utilize CrowdStrike Falcon Next-Gen SIEM to analyze first- and third-party detections, correlate events, and execute query-based analysis.
  • Malware & Traffic Analysis: Perform static/dynamic analysis on malware samples and PCAPs to extract network Indicators of Compromise (IOCs).
  • Incident Response & Remediation: Execute Cybersecurity Incident Response Plans, support containment/eradication efforts, and collaborate with IT resolver, IAM, and infrastructure teams.
  • Threat Hunting & SOC Improvement: Identify vulnerabilities and control weaknesses, validate detections, and recommend logic improvements to SOC runbooks and correlation rules.

What You Bring

  • Experience: 2+ years in security operations, SOC monitoring, SIEM/EDR, incident response, or a related cybersecurity role (MDR/MSSP or enterprise environment preferred).
  • Technical Proficiency: Strong hands-on experience with CrowdStrike Falcon Next-Gen SIEM/EDR and case management platforms like ServiceNow. Familiarity with SOAR orchestration automation.
  • Analytical Skills: Deep understanding of the MITRE ATT&CK framework, incident response lifecycles, and root cause analysis. Ability to make calm, structured decisions under pressure.
  • Education: Bachelor’s degree in Computer Science, Cybersecurity, Information Security, or equivalent practical operations experience.
  • Certifications (Preferred): CrowdStrike Certified SIEM Analyst (CCSA), CompTIA CySA+, or similar SOC/Forensics certifications.