Cyber Security Operations Center (SOC) Analyst [Shanghai] About the Role Join an elite operational cybersecurity team whose mission is to rapidly detect, investigate, and respond to cyber threats and security incidents. As a SOC Analyst, you will be at the forefront of cyber defense, leveraging advanced security technologies to identify malicious activity, conduct investigations, and support incident response efforts. • Be part of a highly skilled cyber defense team operating in a dynamic and challenging environment. • Work with advanced security technologies and modern detection capabilities. • Develop expertise in incident response, threat hunting, and digital forensics. • Investigate real-world cyber threats and contribute to the protection of a global organization. • Collaborate with international cybersecurity teams and security experts. • Play a key role in enhancing detection capabilities and strengthening cyber resilience. Key Responsibilities • Monitor and analyze security events and alerts from multiple security platforms. • Perform triage, investigation, and escalation of security incidents. • Conduct root cause analysis and support digital forensic investigations. • Execute incident response activities, including containment, eradication, and recovery. • Perform proactive threat hunting activities to identify potential threats. • Develop and improve detection rules, playbooks, and security use cases. • Collaborate with global cybersecurity teams to ensure effective threat monitoring and response. • Document incidents and produce clear reports for both technical and non-technical stakeholders. • Contribute to the continuous improvement of SOC processes, tools, and operational capabilities. Technical Environment • SOAR: Palo Alto Cortex - EDR: SentinelOne - NDR: Vectra - SIEM: Google SecOps - Sandbox : Joe Sandbox Proven experience in a Security Operations Center (SOC) environment. Strong knowledge of cybersecurity operations, threat detection, and incident response. Hands-on experience with SIEM, EDR, NDR, and SOAR technologies. Excellent analytical, investigation, and problem-solving skills. Ability to operate effectively in a fast-paced, global cybersecurity environment. Fluency in both English and Mandarin Chinese is mandatory. Strong communication skills, with the ability to present technical findings to both technical and non-technical stakeholders. Compétences SIEM (Google SecOps) Confirmé Threat Hunting Expert Threat Detection & Analysis Expert Incident Response Expert Security Operations Center (SOC) Expert
