Mission.dev
Agreement type : Full-time remote position, 40 hours weekly, contractor agreement with Mission. Our company description: Mission is a platform for hiring, vetting and managing software development talents. It enables our clients to connect with the world’s best talent to build mission-critical software products. About the client: This cybersecurity firm specializes in Managed Detection and Response (MDR) and comprehensive cyber defence services. The organization provides offensive security, threat intelligence, and governance, risk, and compliance (GRC) solutions. Its services protect IT, cloud, and operational technology (OT) environments for enterprise clients. The firm focuses on strategic security advisory and 24/7 monitoring to mitigate risks across diverse digital infrastructures, supporting organizations across multiple industries through proactive threat management and incident response. About The Role As a SOC Analyst within a 24x7 Managed Detection and Response team, you will monitor, investigate, and respond to cyber threats across endpoint, cloud, identity, and network environments. You will provide critical defence for enterprise clients by triaging security events and collaborating with incident response and threat hunting teams. This role offers ownership over initial incident detection and the opportunity to impact client security outcomes by neutralizing evolving threats. You will build technical expertise while defending complex environments in a fast-paced, multi-industry setting. What You'll Do Monitor security events using SIEM, EDR, and SOAR technologies to identify potential threats across client environments. Investigate and validate security alerts to determine the scope, severity, and business impact of potential incidents. Escalate high-risk incidents to senior responders according to established playbooks and procedures. Analyze logs across endpoint, identity, and cloud platforms to identify indicators of compromise and suspicious activity. Support incident response efforts through containment, eradication, recovery, and post-incident documentation. Communicate technical findings and response recommendations clearly to internal teams and external clients. Assist with proactive threat hunting activities and the continuous improvement of detection rules and automation workflows. Maintain accurate documentation of investigations and response activities in accordance with operational standards. What You Bring 1-3 years of experience in a Security Operations Center (SOC), IT operations, or a related cybersecurity role. Foundational knowledge of networking concepts, including TCP/IP, DNS, VPNs, and firewall technologies. Proficiency with Windows and Linux operating systems and basic system administration. Familiarity with common SIEM platforms and endpoint detection and response (EDR/XDR) solutions. Understanding of cyberattack techniques such as phishing, malware, ransomware, and lateral movement. Knowledge of cybersecurity frameworks including MITRE ATT&CK or NIST. Ability to work rotating shifts as part of a 24x7 operational environment. Nice to Haves Experience supporting multi-tenant environments within an MSSP or MDR context. Hands-on experience with major cloud providers such as AWS, Azure, or GCP. Knowledge of scripting or query languages like Python, PowerShell, or KQL for automation and investigation. Exposure to vulnerability management platforms. Relevant industry certifications such as Security+, CySA+, GCIH, or equivalent.
Mission.dev
