SOC Analyst

Commit

. Handle initial triage, monitoring, and investigation of security alerts across cloud and endpoint environments .

Posted 11/3/2026full-timeRemote • MexicoJuniorWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Proficient in monitoring and investigating security alerts across cloud and endpoint environments, with hands-on experience in EDR tools and SIEM platforms. Strong ability to analyze logs, document findings, and communicate effectively with internal teams and clients.

Highest-signal resume keywords

1+ Years Experience In SOC / Security OperationsHands-On Experience With EDR ToolsFamiliarity With SIEM PlatformsExperience With Cloud EnvironmentsFluent English Communication Skills

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Log AnalysisIncident InvestigationAlert TriageScripting In PythonScripting In BashUnderstanding Of Networking BasicsBasic Knowledge Of LinuxBasic Knowledge Of WindowsCloud Activity InvestigationIdentity-Based Attack Understanding

Soft Skills

Excellent Verbal Communication Skills

Tools & Technologies

CrowdStrikeSentinelOneMicrosoft Defender For EndpointSplunkMicrosoft SentinelQRadarAWSAzureGCPCloudTrail

Industry Keywords

Security AlertsSOCSecurity OperationsEDRSIEMCloud EnvironmentsIncident ResponseTrue Or False PositivesSuspicious ActivitiesDetection Logic

Tech Stack

Tools & technologies

AWSAzureCloudDNSGoogle Cloud PlatformLinuxPythonSplunk

About the role

Key responsibilities & impact

Handle initial triage, monitoring, and investigation of security alerts across cloud and endpoint environments
Monitor security alerts from SIEM, EDR, and cloud platforms
Perform initial triage and classification of alerts as true or false positives
Investigate suspicious activities across endpoints, identities, and cloud environments
Escalate confirmed incidents to Tier 2 / Incident Response teams with proper context
Analyze logs from CloudTrail, Azure Activity Logs, OS logs, and other relevant security data sources
Document findings clearly in tickets and investigation reports
Follow existing playbooks and contribute to improving detection logic over time
Communicate with internal teams and clients regarding alerts, findings, and escalations

Requirements

What you’ll need

1+ years of experience in SOC / Security Operations
Hands-on experience with EDR tools such as CrowdStrike, SentinelOne, or Microsoft Defender for Endpoint
Familiarity with SIEM platforms such as Splunk, Microsoft Sentinel, QRadar, or similar
Understanding of networking basics, including IP, DNS, HTTP/S, ports, and related concepts
Basic knowledge of Linux and Windows operating systems
Ability to analyze logs and identify suspicious behavior
Fluent English, both written and spoken — mandatory
Excellent verbal communication skills, especially in client-facing situations
Experience with cloud environments such as AWS, Azure, or GCP
Knowledge of GCP / Google Cloud Platform — significant advantage
Ability to investigate cloud activity, including IAM, API calls, and resource changes
Understanding of identity-based attacks, such as token abuse and privilege escalation
Experience with scripting in Python or Bash