← Tillbaka till jobb

SOC L2 Analyst

  • Distans
  • Sverige
  • Engelska
  • Publicerad 24.09.26 16:04

About the RoleOur client is building a world-class defense against an increasingly sophisticated threat landscape, and we are looking for a sharp, proactive SOC L2 Analyst to join the Information Security team. You will serve as a critical escalation point for our security operations, bridging the gap between automated detection and incident resolution. If you thrive in high-stakes environments and are passionate about threat hunting and incident hardening, this is your opportunity to directly influence the security posture of their fintech ecosystem. What You Will DoElevated Monitoring: Maintain deep visibility into our infrastructure by actively monitoring security alerts across SIEM, IDS/IPS, firewalls, and EDR platforms.Deep-Dive Triage & Analysis: Conduct detailed investigations of complex security events, analyzing network traffic and system logs to identify malicious patterns and vulnerabilities that bypass automated rules.Incident Ownership: Lead the response and containment of security incidents, coordinating cross-functional efforts and ensuring timely, effective resolution during critical events.Advanced Documentation: Maintain meticulous records of security investigations, contributing to high-level incident reporting and maintaining our internal knowledge base.Continuous Hardening: Drive operational improvement by leading post-incident reviews, identifying gaps in our defenses, and refining SOC procedures and automation playbooks. What You BringExperience: 5+ years of hands-on experience in security operations, incident response, or advanced threat monitoring.Security Stack: Proven proficiency with industry-standard SIEM tools (e.g., Splunk, Microsoft Sentinel, QRadar, ELK) and familiarity with EDR, IDS/IPS, and perimeter security solutions.Technical Acumen: Strong working knowledge of cybersecurity principles, threat vectors, network protocols, and application-layer attacks.Cloud Proficiency: Practical experience securing cloud-native environments, with a preference for AWS and Azure.Methodology: Strong grasp of security frameworks like MITRE ATT&CK and the Cyber Kill Chain to guide threat hunting activities.Analytical Rigor: A demonstrated track record of successful security investigations and proactive threat hunting.Communication: Exceptional attention to detail and the ability to articulate complex technical findings to both engineering teams and non-technical stakeholders.Bonus Qualifications: A Bachelor’s degree in Computer Science, Cybersecurity, or a related field, and familiarity with compliance frameworks (ISO27001, ISO27701, PCI DSS, GDPR). What's in It for YouTrue Ownership: You will have the autonomy to influence our security roadmap and make architectural decisions that protect our production environments.Impactful Work: Your work directly safeguards real-money flows and critical financial data, making a tangible difference in the security of our users.Collaborative Culture: Join a cross-functional team of experts in engineering, fraud, and payments who value security and knowledge sharing.Continuous Growth: We invest in your professional development through support for advanced certifications, conference attendance, and research time.Competitive Benefits: We offer a comprehensive benefits package, including competitive compensation, health coverage, and flexible working arrangements.