Cybersecurity Operations Engineer (SOC Analyst)

About the role

This role supports the day-to-day operation, monitoring, administration and continuous improvement of the organization's Security Operations Center and security monitoring capabilities. It bridges cybersecurity operations, IT infrastructure and compliance, focusing on security event monitoring, log management, UAM/PAM governance, access reviews, incident support, tool administration, systems onboarding, reporting and audit compliance. The position works closely with Infrastructure, Network, Cloud, DevOps, Cybersecurity, Risk, Internal Audit, external auditors and technology partners.

Key responsibilities

• UAM/PAM and access governance: administer privileged access, review and manage user, privileged, admin and service accounts, monitor privileged access, run periodic User Access Reviews and keep audit-ready documentation.
• Graylog administration and log management: maintain the Graylog platform, configure log sources, parsers, pipelines, dashboards and alerts, and troubleshoot ingestion and parsing issues.
• System onboarding and monitoring: bring servers, network devices, security platforms, apps, databases and cloud systems into Graylog, validate logging and monitoring coverage, and perform daily alert triage and incident escalation.
• Incident, problem and change management: handle security incidents under ITIL-aligned processes, investigate root causes, and ensure changes to Graylog and security configurations follow change procedures.
• Audit and compliance: support internal and external audits, track findings and remediation, and align operations with ISO/IEC 27001, NIST and internal policies.
• Collaboration and reporting: work with Cybersecurity, Network, Cloud, DevOps, HR, Risk and Audit teams, and prepare SOC, monitoring, UAM/PAM and compliance reports with dashboards and KPIs.

Required profile

• Bachelor's degree in IT, Computer Science or Cybersecurity.
• CompTIA Security+ or CySA+ certification.
• Certified SOC Analyst (CSA).
• 2+ years of experience in a SOC, IT security or compliance role.

Required skills

• Hands-on experience with SIEM or log management tools, especially Graylog, ELK or Splunk.
• Active Directory, Azure AD/Entra ID, RBAC and PAM concepts.
• Basic scripting, networking and monitoring/logging concepts.