SOC Analyst

Distribution centres in Montevideo Department replenish stores several times a week. Store managers run locations with 30 to 100 employees. Holiday season means some nights and weekends for everyone.

Position summary:

The role is new and comes from growth in our client base. Fernández Comercial is hiring for the SOC Analyst role to monitor, investigate and respond to security alerts across our environment. This is an in-person role at our Montevideo location.

What you'll be doing:

• Escalate confirmed incidents and follow the incident response plan
• Analyse reported phishing emails, check headers and URLs, and purge malicious messages
• Tune noisy detection rules with the security engineering team
• Write and update SOC runbooks and playbooks
• Check threat intelligence feeds and IOCs against our environment
• Monitor and triage alerts in Splunk, Microsoft Sentinel, QRadar or Elastic SIEM
• Help with user access reviews and offboarding audits

Qualifications:

• 2-4 years in an SOC, security analyst or IT security role
• Understanding of TCP/IP, DNS, HTTP and common ports and protocols
• Experience reading Windows Event Logs, Sysmon and Linux logs
• Familiarity with the MITRE ATT&CK framework
• Working knowledge of SIEM and EDR tools
• Must be able to pass a background check

Nice to have:

• SOAR platforms such as Splunk SOAR, Cortex XSOAR or Tines
• Prior help desk or network administration experience
• Malware analysis in a sandbox
• CySA+, GCIH, GCIA or BTL1 certification

Schedule: Monday to Friday, 8:00 AM to 5:00 PM, with occasional after-hours escalations

Benefits:

• Private health insurance
• Savings fund
• Gym membership
• Meal vouchers
• Annual bonus
• 13th-month bonus

We will only contact shortlisted applicants.

Start: Immediately.

Demo job created on 11jobs for testing and demonstrations. It is not an actual opening at Fernández Comercial.