{"id":2159086,"url":"https://alion.io/job/itds-senior-soc-analyst-cloud-security-threat-detection","title":"Senior SOC Analyst – Cloud Security & Threat Detection","company":{"id":4374591,"name":"ITDS Portugal","domain":"itdsportugal.com","url":"https://alion.io/company/itds-2","size_band":null,"is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":null,"truth_index":null},"role":"Security","role_family":"Security","seniority":"senior","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Portugal"],"countries":["PT"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":48000,"max_usd":110000,"period":"year","method":"global_role_cell_scaled_by_country","sample_n":1567},"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"Cortex","optional":false},{"name":"Cortex XDR","optional":false},{"name":"Cortex XSOAR","optional":false},{"name":"Crowdstrike","optional":false},{"name":"Darktrace","optional":false},{"name":"Elastic SIEM","optional":false},{"name":"GCP","optional":false},{"name":"IBM QRadar","optional":false},{"name":"Microsoft Defender","optional":false},{"name":"Microsoft Sentinel","optional":false},{"name":"PowerShell","optional":false},{"name":"Python","optional":false},{"name":"SentinelOne","optional":false},{"name":"SIEM","optional":false},{"name":"Splunk","optional":false},{"name":"TCP/IP","optional":false},{"name":"Tines","optional":false},{"name":"Prometheus","optional":true}],"status":"live","first_seen_at":"2026-10-05T00:00:00Z","employer_posted_date":null,"last_verified_at":"2026-10-05T00:00:00Z","board_verified":false,"closed_at":null,"days_open":19,"trust":{"level":"not_scored","repost_count":null,"flags":[],"days_open":19},"description":"Unleash your potential to combat cyber threats and shape the future of cloud security with innovative threat detection and incident response strategies.\nLocation & Work Model\nPortugal —100% Full Remote\nAs a SOC Analyst (Tier 1/2), you will be working for our client, a leading organisation protecting digital assets across multi-cloud environments. You will be both the first line of defence and the technical investigator behind it — owning real-time monitoring, triage, validation, and incident response across an advanced enterprise security stack.\n\nYour main responsibilities:Continuously monitor security alerts across the digital footprint using a SIEM (e.g. Elastic SIEM), network detection (e.g. Darktrace), and EDR/XDR (e.g. CrowdStrike Falcon), and perform initial validation to separate genuine anomalies from false positives (Tier 1).\nInvestigate verified alerts in depth — correlate endpoint, cloud, and network telemetry to reconstruct attack timelines and assess threat impact (Tier 2).\nMonitor, audit, and analyse anomalies across cloud workloads using native security tooling in AWS, Azure, or GCP.\nContribute to detection use-case development and help build and refine security automation workflows (e.g. Cortex XSOAR).\nExecute containment actions following documented playbooks — isolate compromised hosts, deploy network blocks, or revoke compromised cloud credentials.\nDocument findings, log artifacts, and containment actions precisely in the ticketing system, and escalate high-severity or systemic incidents to Tier 3 and the Incident Response lead.\nYou're ideal for this role if you have: Experience in a SOC, security monitoring, or incident response role — roughly 1+ year for a Tier 1 focus, 3+ years for a Tier 2 focus.\nHands-on experience with a SIEM platform (Elastic SIEM, Splunk, Microsoft Sentinel, IBM QRadar, or similar).\nExperience with EDR/XDR tooling (CrowdStrike Falcon, SentinelOne, Microsoft Defender for Endpoint, Cortex XDR, or similar).\nFamiliarity with network detection and response tools (Darktrace, Vectra, ExtraHop, or similar).\nWorking knowledge of at least one major cloud platform (AWS, Azure, or GCP) and its native security, logging, and monitoring services.\nA solid grasp of TCP/IP, common attack techniques, and the MITRE ATT&CK framework.\nStrong written communication for clear, precise incident documentation.\nWillingness to work in a 24/7 rotating shift environment.\nIt is a strong plus if you have:Experience with SOAR platforms and security automation (Cortex XSOAR, Splunk SOAR, Tines, or similar).\nScripting for automation (Python, PowerShell, or Bash).\nRelevant certifications (CompTIA Security+ or CySA+, GIAC GCIH/GCIA, cloud security, or vendor certifications such as CrowdStrike or Elastic).\nExperience in financial services or another regulated environment.\nLanguage Required for the role:Fluent English.\nEligibility for the role:Only candidates with an existing legal right to work in Portugal will be considered.\n\nhttps://itdsportugal.com/en/it-jobs/10116/?utm_source=itjobs","description_format":"text","description_chars":3046,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Cloud Security","Incident Response","Security Operations","Information Technology"],"lifecycle":[{"event":"open","at":"2026-10-09T07:30:12Z"},{"event":"close","at":"2026-10-10T06:56:00Z"},{"event":"reopen","at":"2026-10-20T07:44:19Z"},{"event":"close","at":"2026-10-21T13:02:10Z"},{"event":"reopen","at":"2026-10-21T19:02:35Z"}],"visa":[],"liveness":{"score":66,"band":"ok","label":"Likely open","p_open":0.85,"p_active":0.868,"p_room":0.9,"age_days":19,"expected_fill_days":34,"reasons":["seen:19","velocity","win:mid","comp:brand"],"computed_at":"2026-10-24T06:02:35Z"},"pay":null,"html_url":"https://alion.io/job/itds-senior-soc-analyst-cloud-security-threat-detection","json_url":"https://alion.io/job/itds-senior-soc-analyst-cloud-security-threat-detection.json","meta":{"generated_at":"2026-10-24T22:20:30Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":32740,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-25T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":4374591},"rest":"https://alion.io/mcp/rest/get_company?id=4374591"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fitds-senior-soc-analyst-cloud-security-threat-detection"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fitds-senior-soc-analyst-cloud-security-threat-detection"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fitds-senior-soc-analyst-cloud-security-threat-detection"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/itds-senior-soc-analyst-cloud-security-threat-detection\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fitds-senior-soc-analyst-cloud-security-threat-detection"}]}