SOC Analyst (Temp-to-Perm)

Ready to be the guardian of the digital pulse of Europe's clean energy future? Our client is building a cornerstone for renewable energy, a stable, future-proof platform that empowers professionals to design, monitor, and operate critical assets across the continent. Imagine a place where trust, reliability, and long-term vision are built into the very code, all while upholding the highest standards of European governance and data responsibility. We're seeking a sharp, investigative mind to join our Security Operations Center. You'll be at the forefront, diving deep into alerts generated by our powerful Splunk Enterprise Security platform, uncovering threats, and ensuring the continued integrity of our vital operations.

If you thrive on dissecting complex events, applying sound judgment, and contributing to a secure, sustainable energy landscape, this is your chance to make a real impact!

• Monitor, triage, and investigate notable events and RBA-driven alerts in Splunk Enterprise Security;
• Perform log correlation and threat analysis across endpoint, network, identity (AD/Okta), and cloud telemetry;
• Execute the incident response flow: triage, containment support, escalation, and documentation, with a focus on Mean Time To Respond (MTTR) reduction;
• Map findings to MITRE ATT&CK to strengthen context and improve detection capabilities;
• Maintain auditable incident records in ticketing/case tooling, including a clear timeline and decision rationale;
• Collaborate with the SOC Engineer to tune noisy detections and reduce false positives;
• Participate in shift handovers and weekly intelligence sharing on Indicators of Compromise (IOCs) and Tactics, Techniques, and Procedures (TTPs).