SOC Analyst

Link Group is hiring for a role in cybersecurity operations focused on protecting sensitive business information and reducing data leakage risks.

• Minimum 4 years of experience in Security Operations, Cybersecurity Operations, SOC, or a role focused on data protection.
• Experience investigating cybersecurity alerts and incidents.
• Good understanding of Data Loss Prevention concepts and information protection controls.
• Knowledge of data classification, information labeling, and data protection principles.
• Understanding of incident management and risk assessment processes.
• Familiarity with GDPR, privacy requirements, and Insider Risk Management.
• Ability to work with both technical and business stakeholders.
• Strong analytical and investigative skills.
• Good documentation and organizational skills.
• Ability to manage multiple cases and priorities in a dynamic environment.

Nice to have:

• A degree in Cybersecurity, Information Security, Computer Science, or a related field.

• Investigate alerts related to potentially unauthorized or suspicious handling of sensitive information.
• Analyze data transfers across email, endpoints, cloud applications, collaboration platforms, and removable media.
• Assess incidents based on severity, scope, business impact, and potential security or compliance risk.
• Verify suspected policy violations and identify false positives.
• Escalate confirmed security incidents and support remediation activities.
• Document investigation findings, root causes, decisions, and corrective actions.
• Review business requests requiring exceptions from existing data protection controls.
• Assess business justification and associated security and compliance risks.
• Coordinate exception approvals with relevant security, privacy, compliance, and business stakeholders.
• Ensure approved exceptions are documented, time-limited, monitored, and periodically reviewed.
• Recommend compensating controls where exceptions introduce additional risk.
• Support the configuration, maintenance, and continuous improvement of DLP policies.
• Identify opportunities to reduce false positives and improve detection effectiveness.
• Support audits by providing evidence related to incidents, exceptions, and implemented controls.
• Contribute to security awareness and continuous improvement initiatives related to information protection.