Soc Analyst: Threat Detection & Incident Response

Devoteam | Cyber Trust Lisbon, Lisbon, PT

Publicado 2026-05-27

Descrição

Devoteam Cyber Trust is the Cybersecurity specialist arm of the Devoteam Group. With our 800+ experts located across EMEA, we aim to establish cybersecurity as an enabler of business success rather than a gatekeeper. We leverage an end-to-end approach to Cyber Resilience, Applied Security, and Managed Security services to secure the tech journey of large and medium‑size companies from all sectors and industries.

Since 2009, previously known as INTEGRITY, our team based in Portugal is specialised in providing cutting‑edge Managed Security Services that combine its expertise and proprietary technology to consistently and effectively reduce the cyber risk of our clients.

The comprehensive service range includes Persistent Intrusion Testing, ISO 27001, PCI‑DS, GRC Consulting and Solutions, and Third‑Party Risk Management. ISO 27001 (Information Security) and ISO 9001 (Quality) certified, PCI‑QSA, and member of CREST and CIS – Centre for Internet Security, we provide services to a considerable number of clients operating in more than 20 countries.

Job Description
We are looking for a SOC Analyst to join a team responsible for establishing, maintaining, and evolving a Security Operations Center (SOC), using industry‑leading tools across SIEM, Endpoint Protection, and XDR environments.

This role will focus on security monitoring, incident response, threat analysis, and continuous improvement of the organization’s cyber‑security capabilities.

Responsibilities

Monitor, detect, and respond to security incidents across the organization;

Analyze and correlate security events, alerts, and logs;

Investigate security incidents and recommend remediation actions or workarounds;

Research and assess emerging cyber security threats and mitigation strategies;

Conduct vulnerability assessments and analyze vulnerability reports;

Validate potential findings and support remediation activities;

Contribute to the continuous improvement of SOC monitoring and response processes;

Collaborate with technical teams to implement security best practices;

Produce technical documentation and incident reports.

Qualifications
Requirements

Strong understanding of cyber security threats, vulnerabilities, and countermeasures;

Previous experience working in a Security Operations Center (SOC) environment is preferred;

Good knowledge of network security and application security;

Hands‑on experience with SIEM, EDR/XDR, or security monitoring platforms;

Strong analytical and problem‑solving skills;

Excellent communication and technical documentation skills;

Professional proficiency in English.

Nice to Have

Cyber security certifications such as Security+, CEH, Cy SA+, SC-200, or similar;

Knowledge of frameworks such as MITRE ATT&CK, NIST, or ISO 27001;

Experience with threat hunting, incident response, or log analysis;

Scripting or automation knowledge (Python, Power Shell, Bash) is a plus.

Additional Information
The Devoteam Group works for equal opportunities, promoting its employees based on merit and actively fights against all forms of discrimination. We are convinced that diversity contributes to the creativity, dynamism and excellence of our organization. All of our vacancies are open to people with disabilities.

Localização

Lisbon
Lisbon
Portugal
Anúncio:



Atributos

Tipo de trabalho Tempo total
Tipo de contrato Permanente
Tipo de salário Mensal
Ocupação Soc analyst: threat detection & incident response
Enviar currículo
Sou adequado para este trabalho?
Devoteam | Cyber Trust
Devoteam | Cyber Trust
38 empregos ativos
Registrado 2023-07-18
Portugal
Todas as vagas de empregadores (38) Informar vaga
Enviar currículo
Você está procurando um emprego? Publique seu currículo