BlueVoyant · Romania
Skills: Python
Position: SOC Security Analyst L2 Reports To: SOC Team Lead / SOC Manager Department: Security Operations Center (SOC) Location: Remote, Romania Shift Schedule: 4-on / 4-off, rotating every 28 days between Early (9:00 AM–7:00 PM), Middle (2:00 PM–12:00 AM) and Night (11:00 PM–9:00 AM), Romania time Work Authorization: Must be resident in, and legally authorized to work in, Romania
BlueVoyant is seeking a SOC Security Analyst L2 to join our Security Operations Center, defending our global customers against constant and evolving adversary activity. In this role you will own and work through a queue of security alerts and tickets, carrying out thorough investigations, resolving cases accurately and efficiently, and escalating confirmed or complex incidents to L3 analysts with clear, well-documented findings. You will work closely with senior analysts and clients to reduce the impact and dwell time of security incidents. This role reports into BlueVoyant SOC leadership and operates under BlueVoyant processes, tooling, and supervision at all times, including when working within client environments.
What You'll Do:
Monitor, triage, and investigate security alerts and tickets from multiple sources, including SIEM logs, endpoint logs, and EDR telemetry. Own assigned tickets through to resolution, working within defined SLAs and prioritizing by severity and client impact. Research indicators and activities to determine reputation and suspicious attributes. Perform analysis of suspicious files, emails, URLs, and attacker infrastructure to support investigations. Determine whether activity is malicious, benign, or a false positive, and escalate confirmed or complex incidents to L3 analysts with clear supporting evidence. Document investigation steps, findings, and recommended actions accurately within the ticketing and case management system. Take initial response actions in line with runbooks and client-approved procedures, such as isolating …truncated… t opportunities to all em…
Sign in to see the original posting
Browse more developer jobs on RoleBurst