Job Description

At Nubax we are looking for a JR SOC ANALYST!

Monitor alerts and security events on assigned SIEM/SOC platforms.
Perform initial analysis of security alerts and determine whether they correspond to legitimate activity, false positive or potential incident.
Classify alerts and incidents according to the criticality and impact criteria defined by the SOC.
Investigate events using information available in SIEM, EDR/XDR and other security sources.
Execute response procedures defined in SOC playbooks.
Document investigations, evidence, actions taken and conclusions in the corresponding management systems.
Escalate incidents that exceed the level of responsibility or present characteristics of high criticality.
Follow up on incidents until their resolution or escalation.
Collaborate with Semi Senior and Senior analysts on more complex investigations.
Participate in basic Threat Hunting tasks and search for indicators of compromise.
Contribute to the identification of false positives and opportunities for improvement in detection rules.
Comply with the procedures, SLA and operational metrics established by the SOC.
Prepare activity records and reports in accordance with defined procedures.
Requirements:

Training in IT Security, Systems, Networks, Telecommunications or related careers in progress (Deseable).
1-2 years of experience in similar roles
Basic SIEM management: event query, indicator search, alert review and case generation.
Basic knowledge of EDR/XDR.
Knowledge of log analysis of Windows, Linux, firewalls, applications and network devices.
Basic knowledge of TCP/IP, DNS, HTTP/HTTPS, SMTP, SSH and VPN (Deseable).
Basic knowledge of Windows and Linux, including processes, services, users, permissions and logs (Deseable).
Basic knowledge of Active Directory, authentication, users, groups, privileges and GPO.
Basic knowledge of IOC, IOA, TTP and anomalous behavior (Deseable).
Basic knowledge of MITER ATT&CK (Deseable).
Fundamental knowledge of Incident Response (Deseable).
Basic knowledge of phishing, malware, ransomware, credential theft, lateral movement and privilege escalation.
Ability to execute playbooks and SOC operational procedures.
Ability to determine the initial criticality of an alert and carry out the corresponding escalation.
Basic knowledge of Threat Intelligence (Deseable).
Basic scripting knowledge, preferably Python, PowerShell or Bash (Deseable).
Basic knowledge of vulnerability management and risk concepts (Deseable).
General knowledge of NIST, MITER ATT&CK and Cyber ​​Kill Chain (Deseable).
Knowledge of operational SOC metrics, including MTTA, MTTR, alert volume and false positives.
Previous experience in SOC, NOC, infrastructure support, computer security or related positions desirable (Not exclusive).
Desirable experience with SIEM, EDR/XDR, SOAR or Threat Intelligence platforms.
Desirable certifications: CompTIA Security+, SC-200, SIEM/EDR manufacturer certifications or equivalent (Deseable).
Why choose Nubax?
At Nubax, on the ground we offer solutions: we create real impact in an increasingly digital and challenging world. We are a company with entrepreneurial DNA, where each person has the freedom to propose, build and grow.

We think big, but we act closely: We change innovation, but also the commitment to humans.
Your development is a protagonist: you will find an environment where learning is constant, challenges are real and opportunities are concrete.
We work with purpose and as a team, with sector referents who share our experience and are always willing to collaborate.
The work climate is not a benefit, it is part of our culture: we value respect, active listening and goodwill as pillars of our day to day.
The benefits we offer are: Free days (for your cumpleaños and a monthly day to enjoy as you like), discounts on SportClub + access to the online platform, prepayment of first level, continuous training, possibility of development/growth within the organization, extra days per study/exam, extra days per paternity, birth gifts and special deals, among others!

We are waiting for you!!

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
The information you share will be treated confidentially and used solely for the purposes of this search and/or future selection processes.",