SOC Analyst – Tier 1 (Remote – Montevideo)

About the role

The SOC Analyst – Tier 1 will be the first line of defense in a Managed Security Operations Center, monitoring security alerts, performing initial analysis, and escalating confirmed incidents. This full‑time remote position is based in Montevideo and works on rotating shifts to provide 24/7 coverage.

Key responsibilities

• Monitor security alerts across SIEM and EDR platforms such as Elastic and CrowdStrike Falcon.
• Perform alert triage, validate events, and escalate confirmed incidents with full context.
• Follow established playbooks, document investigations, and ensure smooth handovers between shifts.
• Contribute to the continuous improvement of detection rules and threat detection logic.

Required profile

• Minimum 2 years of experience in a Security Operations Center or similar security monitoring role.
• Hands‑on experience with SIEM and EDR technologies.
• Familiarity with the MITRE ATT&CK framework.
• Strong analytical abilities and experience performing alert triage.
• Advanced English proficiency (spoken and written) for daily communication with an international team.
• Availability to work rotating shifts.

Required skills

• Elastic SIEM
• CrowdStrike Falcon
• MITRE ATT&CK framework
• Python (scripting)
• PowerShell (scripting)