Security Operations / Analyst

Job Title: Security Operations / Security Analyst (SOC Orange Team)

Job Summary:

We are seeking a skilled and motivated Security Analyst to join our Security Operations Center (SOC) Orange Team. The ideal candidate will possess hands-on experience in firewall and SIEM tools, with strong analytical and troubleshooting skills in managing security infrastructure. This role is critical in monitoring, auditing, and enhancing the organizations cybersecurity posture.

Key Responsibilities:

• Manage and maintain network security appliances, with a primary focus on

  Fortinet firewalls

  .
• Conduct

  firewall rule auditing

  and

  configuration reviews

  to ensure alignment with security best practices.
• Utilize and monitor

  SIEM tools

  such as

  Splunk

  ,

  QRadar

  , and

  SentinelOne

  for threat detection and incident response.
• Understand how SIEM systems operate, and demonstrate

  hands-on experience in usage (L1 and L2)

  .
• Create and manage

  SOAR/XOAR playbooks

  , including

  design, development, and implementation

  .
• Perform

  log analysis

  , incident detection, and threat intelligence correlation.
• Collaborate with internal teams to strengthen security controls and implement corrective actions.
  
• Stay current with emerging security threats and recommend appropriate defensive measures.
  

Required Skills and Experience:

• Proven experience in managing routers and firewalls

  , especially Fortinet, following industry best practices.
• Strong expertise in

  firewall rule auditing

  and

  security configuration management

  .
• Practical experience with

  SIEM platforms

  : Splunk, QRadar, SentinelOne

  usage experience

  is essential (configuration knowledge is a plus).
• Understanding of

  SOC operations and incident lifecycle management

  .
• Knowledge of

  SOAR/XOAR platforms

  and ability to build and customize automated response playbooks.
• Familiarity with security event analysis, alert triage, and escalation procedures.
  

Preferred Qualifications:

• Certifications such as

  Fortinet NSE

  ,

  Splunk Certified

  ,

  Security+

  , or equivalent.
• 25 years of experience in a SOC environment or cybersecurity operations.
  
• Strong communication and documentation skills.