dev.bg

SOC Analyst

Talent Hunter · София · Mid

21 октомври 2026 г.
Публикувана
22 октомври 2026 г.
Последно видяна
Активна
Статус
1 ден
Отворена от
CISSP домейн

Умения

Microsoft Sentinelincident responsethreat huntingMITRE ATT&CKnetworkingSentinelSplunkQRadarSIEMEDRXDRdata protectioncloud securityPowerShellPythonAzureSOARBashAWSGCP

Сертификати

Предимство

Регулации и стандарти

Описание

Talent Hunter is an IT and Telecom Recruitment Company ensuring the best professional opportunities for talents in the high-tech industry and providing quick and cost-effective solutions to client companies seeking the best talent for their business. We believe that each one of us is designing our lives through the everyday choices we make.

SOC Analyst (Security Operations & Network Operations)

Talent Hunter is looking for an experienced SOC Analyst to join an innovative, technology-driven organization operating in a dynamic global environment.

Are you passionate about cybersecurity, threat detection, and incident response?

Do you enjoy investigating security events while ensuring the stability and availability of critical IT services?

We are looking for an experienced SOC Analyst who is ready to take on a broader operational role, combining cybersecurity expertise with Network Operations Center (NOC) responsibilities.

About the Role

This is more than a traditional SOC Analyst position.

The role combines security monitoring, threat investigation, incident response, infrastructure monitoring, and service availability management. During designated shifts, you will be responsible for identifying and responding to both cybersecurity threats and operational incidents, helping maintain the security, resilience, and reliability of critical business services.

This opportunity is ideal for a professional looking to expand their expertise across cybersecurity, cloud technologies, infrastructure operations, and enterprise incident management.

Key Responsibilities:

Security Operations

– Monitor, triage, and analyze security alerts using SIEM, EDR, XDR, and other security monitoring tools.
– Investigate security incidents from initial detection through response and containment.
– Perform threat hunting activities to identify suspicious behavior and potential threats.
– Optimize detection rules and use cases to improve detection accuracy and reduce false positives.
– Investigate malware, phishing attempts, and compromised accounts.
– Document findings, prepare incident reports, and recommend remediation actions.
– Contribute to the development of security playbooks, procedures, and continuous improvement initiatives.
– Collaborate with IT, Infrastructure, Cloud, and Engineering teams to strengthen the organization’s security posture.

Network & Operations Monitoring

– Monitor the availability, health, and performance of critical applications, infrastructure, cloud platforms, networks, and services.
– Respond to alerts generated by operational monitoring systems.
– Perform initial troubleshooting and service validation.
– Assess operational severity and potential business impact.
– Coordinate with relevant technical teams to resolve incidents and service disruptions.
– Support major incident management and stakeholder communications.
– Maintain awareness of critical business services and their operational status during assigned shifts.

Incident Management & Coordination

– Act as an initial point of response for security and operational incidents.
– Investigate, analyze, prioritize, and coordinate incident resolution activities.
– Escalate incidents according to technical severity and business impact.
– Maintain accurate incident records, timelines, and communication logs.
– Participate in post-incident reviews and lessons-learned sessions.

Requirements:

– At least 3 years of experience in Security Operations, Incident Response, Threat Detection, Threat Hunting, or Cybersecurity Monitoring.
– Strong hands-on experience with SIEM platforms such as QRadar, Splunk, Microsoft Sentinel, or similar solutions.
– Experience with EDR/XDR tools and security monitoring technologies.
– Solid understanding of networking, operating systems, cloud technologies, and common attack techniques, including the MITRE ATT&CK framework.
– Practical experience in log analysis, malware triage, phishing investigations, and security incident handling.
– Understanding of incident management and major incident response processes.
– Strong analytical, troubleshooting, and problem-solving skills.
– Excellent communication and stakeholder management abilities.
– Ability to work independently while maintaining both security and operational awareness.
– Willingness to participate in rotating shifts and on-call coverage when required.

Experience in enterprise operations, infrastructure monitoring, service availability management, or major incident coordination is a strong advantage.

Nice to Have:

– Relevant certifications such as GCIH, GCIA, CySA+, Security+, CEH, SC-200, or equivalent.
– Experience with monitoring platforms such as PRTG, Grafana, Prometheus, SolarWinds, Dynatrace, or AppDynamics.
– Cloud security experience with Azure, AWS, or GCP.
– Familiarity with SOAR platforms and security automation.
– Scripting skills in Python, PowerShell, or Bash.
– Experience coordinating major incidents in enterprise environments.
– Previous experience in NOC, infrastructure operations, operational monitoring, or service reliability.

What’s on Offer?

– Attractive compensation package;
– Career and Development – worldwide career opportunities, access to a high-tech Engineering Lab;
– Work That Fits Your Life- possibility to work from home, transition support through life events.
– Wellness and Health Programs;
– Additional Health Insurance with Dentist (Luxury package);
– Certification and Training Programs;
– Performers Bonus Scheme;
– Food Stamps (extra money to the salary for food);
– Extra Days Paid Leave;
– Secured Parking Space;
– Exciting Workplace Experience;

Please send your recent CV stating the position title in the subject line and we will contact you if you have the required skill set!

Licensed by MLSP, license N 2651, valid from 29.10.2018

Talent Hunter Ltd. informs you that part of the data you provide by sending your application is personal data and falls under the special treatment and protection of the Data Protection Law and the 2016/679 Regulation. The provided personal data will be processed for legally acknowledged purposes, related to the present job ad, as well as to the realization of the legal interest of the personal data administrator. Talent Hunter Ltd. processes, stores, and uses the voluntarily provided personal data in legally determined timeframes, guaranteeing their security and confidentiality. Please be informed that hereby you agree that Talent Hunter Ltd. might provide your personal data to governmental bodies and institutions, or third parties when there is such obligation by law, or it is required for the realization of your rights and legal interests as a participant in a recruitment process with the purpose of concluding a future labor contract. As per the internal rules of Talent Hunter Ltd. you have the right to access and edit your personal data, the right to be deleted, and the right to object to processing, presenting, or revealing of your personal data for purposes different from the ones, stated above.

История на обявата

  • 22 октомври 2026 г.Появи сеобхождане

Очаквано възнаграждение

Обявата не посочва заплата. Оценката по-долу е за SOC Analyst / Threat Hunter на ниво Mid според бенчмарка на CSF.BG — не е предложение на работодателя.

€1,400 – €2,500нето/месец · 2 – 5 години опит
Средно търсене·Всички нива за ролята

Само 2 обяви за тази роля и ниво публикуват заплата — твърде малко за средна стойност.

Знаеш колко се плаща за такава роля? — анонимно, за да станат тези числа по-точни.