SOC Analyst
Service Factory Solutions
/job-details/11679
**The Role**
We are looking for a SOC Analyst to join our Cybersecurity Operations team, at a roughly mid-level of experience.
The person will mainly handle day-to-day Security Operations activities: analyzing alerts and potential threats, investigating events detected by security tools, and supporting the handling of requests and communications with customers.
We are looking above all for someone with solid foundational experience in cybersecurity, technical curiosity, autonomy in finding information, and a strong inclination toward problem solving.
**What You Will Do**
- Analyze and manage security alerts and threats.
- Investigate events through EDR consoles and other cybersecurity tools (NDR, SIEM, etc.).
- Research and correlate information about endpoints, processes and events.
- Create and use queries to dig deeper into security events.
- Analyze suspicious emails and potential phishing campaigns.
- Interact with customers, communicating in a professional manner.
- Be progressively involved in Incident Response activities.
- Use AI tools to support analysis and research activities.
- Collaborate with the rest of the team on SOC operational activities.
**Requirements**
- Previous experience in cybersecurity / Security Operations.
- Hands-on experience with at least one EDR platform and an understanding of how it works.
- Ability to analyze alerts and potential threats and investigate them independently.
- Ability to carry out technical research and interpret the information gathered.
- Basic knowledge of phishing and suspicious email analysis.
- Ability to use or build queries to search for information within security tools.
- Familiarity with AI tools applied to cyber operations activities.
- Good written communication skills and customer relationship skills.
- Excellent command of the Italian language.
- Availability for on-call duty, when required.
**Preferred Requirements**
**It is a plus to have already worked with some of the following technologies:**
- Microsoft security technologies;
- SentinelOne;
- NDR solutions;
- tools used in SOC/Security Operations contexts.
Specific product knowledge is not necessarily a binding requirement: it is more important to have worked with similar technologies and to have the foundations needed to learn new tools quickly.
**The Profile We Are Looking For**
We are looking for a practical, curious and proactive person who, when facing an alert, does not stop at the first available evidence, but knows how to look for information, formulate hypotheses and investigate the problem independently.
The goal is to bring in a person who can progressively become autonomous in day-to-day SOC activities and, as their experience grows, also be involved in Incident Response activities, thereby expanding the role beyond alert handling alone.
**How to Apply**
**Interested candidates are invited to submit their CV to:**
careers@servicefactory.al
*\*Please note that only shortlisted candidates will be contacted for an interview.*
We are looking for a SOC Analyst to join our Cybersecurity Operations team, at a roughly mid-level of experience.
The person will mainly handle day-to-day Security Operations activities: analyzing alerts and potential threats, investigating events detected by security tools, and supporting the handling of requests and communications with customers.
We are looking above all for someone with solid foundational experience in cybersecurity, technical curiosity, autonomy in finding information, and a strong inclination toward problem solving.
**What You Will Do**
- Analyze and manage security alerts and threats.
- Investigate events through EDR consoles and other cybersecurity tools (NDR, SIEM, etc.).
- Research and correlate information about endpoints, processes and events.
- Create and use queries to dig deeper into security events.
- Analyze suspicious emails and potential phishing campaigns.
- Interact with customers, communicating in a professional manner.
- Be progressively involved in Incident Response activities.
- Use AI tools to support analysis and research activities.
- Collaborate with the rest of the team on SOC operational activities.
**Requirements**
- Previous experience in cybersecurity / Security Operations.
- Hands-on experience with at least one EDR platform and an understanding of how it works.
- Ability to analyze alerts and potential threats and investigate them independently.
- Ability to carry out technical research and interpret the information gathered.
- Basic knowledge of phishing and suspicious email analysis.
- Ability to use or build queries to search for information within security tools.
- Familiarity with AI tools applied to cyber operations activities.
- Good written communication skills and customer relationship skills.
- Excellent command of the Italian language.
- Availability for on-call duty, when required.
**Preferred Requirements**
**It is a plus to have already worked with some of the following technologies:**
- Microsoft security technologies;
- SentinelOne;
- NDR solutions;
- tools used in SOC/Security Operations contexts.
Specific product knowledge is not necessarily a binding requirement: it is more important to have worked with similar technologies and to have the foundations needed to learn new tools quickly.
**The Profile We Are Looking For**
We are looking for a practical, curious and proactive person who, when facing an alert, does not stop at the first available evidence, but knows how to look for information, formulate hypotheses and investigate the problem independently.
The goal is to bring in a person who can progressively become autonomous in day-to-day SOC activities and, as their experience grows, also be involved in Incident Response activities, thereby expanding the role beyond alert handling alone.
**How to Apply**
**Interested candidates are invited to submit their CV to:**
careers@servicefactory.al
*\*Please note that only shortlisted candidates will be contacted for an interview.*
