SOC Analyst, Tier 1

Aspenview Technology Partners · LATAM

HíbridoNão informado

Publicada mês passado

Sobre a vaga

<div class="content-intro">Build the Future with AspenView Technology Partners At AspenView, we are passionate about transforming the way organizations approach technology. We specialize in creating high-performing, nearshore IT teams to help North American clients innovate faster and more efficiently. As we continue to grow, we’re looking for exceptional people to join our team and help drive impactful change across industries.</div>  Why Join AspenView? At AspenView, we’re more than a nearshore IT partner—we’re a people-first, purpose-driven company that believes great culture drives great outcomes. We’re passionate about connecting talent and technology to deliver measurable value for clients—and meaningful career paths for our people. Here’s what you can expect: <ul data-pattern="discCircleSquare" data-depth="1"> <li>Competitive base</li> <li>Flexible work model: hybrid, remote, or in-office</li> <li>Real growth opportunities and leadership visibility</li> <li>Inclusive, respectful culture that blends U.S. innovation with Colombian heart</li> <li>A company that listens, invests in you, and celebrates wins together</li> </ul> The Tier 1 SOC Analyst is the critical first responder within the security operations team, monitoring a US higher-education client on a shift rotation. You are responsible for executing triage properly: working the alert, determining its validity, and either closing it with a justified note or escalating it cleanly so the next person has exactly what they need. You will never guess who owns a system, as each account has a named engineer behind it, and you will always have a Tier 2 analyst available on shift or on call to support you. What you will do: Alert Triage & Investigation <ul data-path-to-node="15"> <li> Own the first-line triage of every alert that reaches the queue during your shift, acting against each client's agreed severity tiers. </li> <li> Conduct initial investigations by pulling logs, checking hosts, and reviewing accounts to establish whether a genuine event occurred. </li> <li> Close non-actionable alerts with clear, detailed notes that stand up to later review. </li> </ul> Escalation & Collaboration <ul data-path-to-node="17"> <li> Deliver clean escalations; ensure that a Tier 2 analyst never has to redo your investigative work to understand the case. </li> <li> Write comprehensive shift handovers so the incoming analyst can act immediately without requiring a phone call. </li> <li> Actively improve the queue by flagging repetitive alerts (seen three times or more) to trigger detection rule changes. </li> </ul> Tools & Technologies: <ul data-path-to-node="19"> <li> SIEM Platforms: Hands-on experience with Microsoft Sentinel (preferred), Splunk, QRadar, or Elastic. </li> <li> Frameworks: Working, practical knowledge of MITRE ATT&CK applied directly to real-world alerts. </li> <li> Infrastructure: Solid networking, Windows, and Linux fundamentals to distinguish misconfigurations from actual intrusions. </li> </ul> What you bring: <ul data-path-to-node="21"> <li> Experience: Two or more years operating in a SOC, NOC, or comparable monitoring role. </li> <li> Communication: English proficiency that holds up reliably in written notes and on 3am escalation calls. </li> <li> Mindset: Diligent and team-oriented. You escalate early rather than sitting on a potential issue, and you value clean documentation. </li> <li> Availability: Complete comfort with working rotating shifts, including nights and weekends, as a permanent working pattern. </li> </ul> Bonus Qualifications: Proficiency in KQL, Python, or PowerShell scripting; familiarity with EDR consoles (Microsoft Defender, CrowdStrike, SentinelOne); exposure to phishing analysis or identity-based attacks; and relevant certifications such as SC-200, CySA+, BTL1, or Security+. <div class="content-conclusion">Visa Sponsorship AspenView does not sponsor employment visas for this role. Applicants must be permanently authorized to work in their country of residence and must not require visa sponsorship now or in the future. Equal Opportunity Employer AspenView is proud to be an equal opportunity employer. We believe in creating an environment where all employees feel welcome, valued, and empowered to succeed. We celebrate diversity and strive to build a culture of inclusion where all individuals, regardless of their race, color, gender, gender identity or expression, sexual orientation, disability, age, or any other characteristic, can thrive. We encourage applicants from all walks of life to join our team and make a lasting impact.</div>

Leu e ficou na dúvida? A nota responde.

Ver minha nota