SOC Analyst

Talus employs 2,400 people across engineering hubs in Kaunas and three other locations, building ERP software for mid-market manufacturers. More than 9,000 organisations use our HR and payroll suite, from regional hospitals to school districts. Laptops are MacBook Pros, and you pick your own editor.

Overview:

This role opened up because a team member is relocating. The operations team runs a 24/7 SOC. We need someone who can work through an alert queue and tell which ones matter. Talus is hiring for the SOC Analyst role to monitor, investigate and respond to security alerts across our environment. On site, Vilnius.

Key responsibilities:

• Document incidents with timeline, impact and root cause.
• Report on security awareness training and phishing simulation results.
• Help with user access reviews and offboarding audits.
• Review firewall, proxy, VPN and authentication logs for suspicious activity.
• Tune noisy detection rules with the security engineering team.
• Monitor and triage alerts in Splunk, Microsoft Sentinel, QRadar or Elastic SIEM.
• Write and update SOC runbooks and playbooks.
• Check threat intelligence feeds and IOCs against our environment.

Required qualifications:

• 3+ years in an SOC, security analyst or IT security role.
• Experience reading Windows Event Logs, Sysmon and Linux logs.
• CompTIA Security+ or equivalent (or ability to obtain within six months)
• Working knowledge of SIEM and EDR tools.
• Basic scripting in PowerShell or Python.
• Clear written communication for incident tickets and reports.
• Must be able to pass a background check.

Nice to have:

• KQL or SPL query writing.
• SOAR platforms such as Splunk SOAR, Cortex XSOAR or Tines.

Schedule: Day shift with one week of on-call every six weeks

Salary: €2,600 - €3,200 monthly

What we offer:

• Flexible hours.
• Training budget.

Relocation support is available for the right candidate.

Candidates must be eligible to work in Lithuania.

Duration: 12 months. Start: Immediately.

Demo job created on 11jobs for testing and demonstrations. It is not an actual opening at Talus AB.