SOC Security Analyst – Level 2, Investigation and Response

🕒 March 12

🇧🇷 Brazil – Remote

⏳ Contract/Temporary

🟢 Junior

🟡 Mid-level

🔐 Security Analyst

👻 Ghost score 70%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

IPV7

WebsiteLinkedInAll Job Openings

201 - 500 employees

Founded 2014

🔒 Cybersecurity

💼 Consulting

Cybersecurity • Cloud Computing • Consulting

IPV7 is a business solution partner that specializes in engineering services, consulting, cyber security, network management, and cloud computing. The company provides tailored solutions for Internet Service Providers (ISPs), telecommunication companies, government, and enterprise sectors across Latin America. Its focus areas include technical and operational auditing, risk assessment, and strategic consultancy to facilitate robust network systems and software solutions.

📋 Description

• Conduct advanced investigations of complex alerts by correlating endpoint, firewall, network, and cloud environment logs • Lead the incident response lifecycle, from technical containment through recommendations for eradication measures • Perform threat hunting activities to proactively identify threats that did not trigger automated alerts • Administer and configure next-generation firewalls, including ACLs, IPS/IDS policies, content filtering, and SSL inspection • Manage EDR/XDR platforms by analyzing alerts, creating exclusion policies, and performing remote scans • Analyze security logs and events in SIEM tools, creating queries and dashboards to identify attack patterns • Provide technical support to the Level 1 team by refining playbooks and correlation rules to reduce false positives • Document incidents, investigations, evidence, and post-incident technical reports (Post-Mortems)

🎯 Requirements

• At least 2–3 years of experience in security operations or incident response • Knowledge of network infrastructure, including routing protocols, VLANs, and security-focused network segmentation • Experience administering firewalls (Fortinet, Palo Alto, Check Point, or similar) and VPNs • Proficiency with EDR/XDR platforms (CrowdStrike, SentinelOne, Microsoft Defender, Trend Micro, Bitdefender, or similar) • Experience analyzing logs and using SIEM platforms, including creating queries and dashboards (KQL, SPL, or Lucene) • Ability to analyze traffic and reconstruct attacks using PCAPs and Proxy/WAF logs • Knowledge of the MITRE ATT&CK framework • Bachelor’s degree in Information Security, Computer Networks, Information Systems, or a related field