Senior SOC Analyst – Cloud Security & Threat Detection

The role is for a client of ITDS, an international cybersecurity organization focused on protecting essential infrastructure and digital assets, working within a dynamic and innovation-driven security team.

• Minimum 4 years experience in cybersecurity, SOC operations, or threat analysis.
• Proficiency with security monitoring tools: Elastic SIEM, Darktrace, CrowdStrike Falcon, and AWS native security services.
• Strong analytical and troubleshooting skills with ability to perform root cause analysis.
• Hands-on experience in incident response and threat containment.
• Ability to develop automation workflows and optimize security operations.

Nice to have:

• Certifications such as CISSP, CISA, CEH, or AWS Security Specialty.
• Previous experience in international, hybrid security environments.

• Actively monitor security alerts across platforms including Elastic SIEM, Darktrace, and CrowdStrike Falcon for threat validation.
• Conduct in-depth investigations into security incidents correlating data logs, cloud events, and network telemetry.
• Monitor and analyze anomalies within cloud workloads with AWS tools such as Amazon GuardDuty, Security Hub, Inspector, and CloudTrail.
• Develop and optimize security use cases and automate workflows using Cortex SOAR and AWS tools.
• Execute containment and remediation actions like isolating hosts and revoking cloud access credentials.
• Document findings and escalate critical incidents accurately within ticketing systems.

Only candidates with a legal right to work in the European Union are eligible for this role; candidates must be from Europe.