SOC Engineer
On-siteBuenos Aires, Buenos Aires F.D., Argentina
Buenos Aires, Buenos Aires F.D., ArgentinaOn-siteFull Time
Full Time
Job Summary
Administer and maintain SIEM and SOAR platforms, configuring log sources to ensure critical system event ingestion. Design correlation rules and alerts for threat detection, while developing and maintaining incident response playbooks to standardize analysis and containment. Execute threat analysis, triage, and incident investigations to identify anomalies, exploits, and vulnerabilities. Collaborate with infrastructure and development teams to mitigate risks, manage simulation exercises, and contribute to SOC automation through scripting and threat intelligence integrations.
Required Qualifications
- Experiencia con herramientas SIEM (Splunk, OpenSearch, Sentinel, QRadar, etc.)
- Conocimientos en log analysis, threat detection, MITRE ATT&CK y análisis forense
- Experiencia en scripting o automatización (Python, bash)
- Estar familiarizado con tecnologías Open Source (OpenSearch, Wazuh)
- Familiaridad con procesos de respuesta a incidentes (NIST 800-61, SANS)
Desired Qualifications
- Experiencia en herramientas y servicios de seguridad sobre GCP
- Experiencia en escalamientos e incidentes
- Entendimiento de la metodología SOCless
- Buenas habilidades de comunicación y documentación técnica
- Experiencia automatizando procesos
- Experiencia en armado de Postmortem e Incident Report
Hiring someone like this?
Get your role in front of qualified candidates on Sorce.