Senior SOC Analyst

Hemlockgate manages assets for more than 200,000 clients through 120 offices. Institutional clients include pension funds, endowments and insurance companies.

Job summary

Hemlockgate has an opening for a Senior SOC Analyst. This role handles alert triage, phishing investigations and vulnerability tracking for about 3,000 endpoints. Our headquarters is in Bari, and about a third of the team works remotely from other countries. We engage team members in Spain as full-time contractors. Most of our contractors have been with us for more than two years. We use Slack, Notion and Google Meet. Cameras on for team calls.

Job duties

• Tune noisy detection rules with the security engineering team.
• Report on security awareness training and phishing simulation results.
• Review firewall, proxy, VPN and authentication logs for suspicious activity.
• Escalate confirmed incidents and follow the incident response plan.
• Help with user access reviews and offboarding audits.
• Document incidents with timeline, impact and root cause.

Required qualifications

• Understanding of TCP/IP, DNS, HTTP and common ports and protocols.
• Ability to work shifts, including some nights, weekends or holidays as scheduled.
• Clear written communication for incident tickets and reports.
• Experience reading Windows Event Logs, Sysmon and Linux logs.
• Working knowledge of SIEM and EDR tools.
• CompTIA Security+ or equivalent (or ability to obtain within six months)
• Familiarity with the MITRE ATT&CK framework.

Preferred qualifications

• Malware analysis in a sandbox.
• KQL or SPL query writing.
• Cloud log analysis (CloudTrail, Entra ID sign-in logs)
• Prior help desk or network administration experience.

Schedule: Monday to Friday, 8:00 AM to 5:00 PM, with occasional after-hours escalations

Pay and benefits

• Long-term engagement.
• Monthly payments via wire transfer or Wise.
• Company laptop.
• Paid in USD.

If you are shortlisted, we will reach out to set up a first call.

Duration: 6 months. Start: Within 30 days.

Demo job created on 11jobs for testing and demonstrations. It is not an actual opening at Hemlockgate S.r.l..