Cyber Defense Analyst

About the role

You will protect complex technology environments by turning security signals into actionable insights. The role spans endpoints, networks, identity systems, and cloud environments, using security platforms to detect suspicious activity, investigate alerts, and support incident response.

Key responsibilities

• Monitor, support, and configure SIEM and endpoint security tools to identify potential threats.
• Correlate events across endpoints, networks, identity systems, and cloud environments.
• Conduct initial analysis, triage, and escalation of security alerts following SOC procedures.
• Assist in fine‑tuning detection rules to improve alert accuracy and response efficiency.
• Provide technical support and configuration assistance for security infrastructure and network controls.
• Review logs, network activity, and security events to identify suspicious behavior or misconfigurations.
• Collaborate with infrastructure teams to maintain secure network architecture and ensure compliance with security standards.
• Support and configure identity protection and access‑monitoring tools, analyzing authentication patterns and privilege escalations.
• Validate endpoint compliance, agent health, and policy configuration across devices.
• Assist with containment and coordination of response actions during security incidents.

Required profile

• Bachelor’s degree in a related field or equivalent professional experience.
• 2+ years of hands‑on experience in cybersecurity, security operations, or SOC environments.
• Advanced English proficiency and strong analytical, critical‑thinking, and communication skills.
• Ability to work independently under pressure while maintaining attention to detail.

Required skills

• Experience with SIEM platforms such as Microsoft Sentinel, Stellar Cyber, or Google SecOps.
• Experience with EDR/XDR tools like SentinelOne, Microsoft Defender, or Cortex XDR.
• Knowledge of network security technologies (Fortinet, Palo Alto) and IAM concepts (Microsoft Entra ID).
• Hands‑on experience with cloud environments (GCP, Azure).
• Scripting and querying skills (PowerShell, Python, KQL).
• Familiarity with MITRE ATT&CK framework and incident response processes.