Security Analyst

As a Security Analyst focused on Incident Response (IR), Threat Intelligence (TI), and Threat Hunting, you will play an important role in defending OutSystems’ digital assets and global operations. You will investigate security alerts and incidents, support proactive threat detection, and contribute to the continuous improvement of our security operations capabilities. This is a hands-on technical position within a 24/7 global SOC, providing an opportunity to develop strong expertise in incident response, threat detection, and adversary TTPs while working closely with experienced security analysts and other technical teams.

Responsibilities

Investigate and respond to security alerts and incidents using established procedures, playbooks, and investigation methodologies; Perform log analysis and investigate suspicious activity across on-premises and cloud environments; Support incident response activities including triage, investigation, containment, and remediation, escalating complex or high-impact incidents when required; Execute defined threat hunting activities using threat intelligence, analytics, behavioral patterns, and known attacker TTPs; Monitor relevant threat intelligence and contribute to identifying threats that may impact OutSystems’ environment; Support the development and improvement of SIEM detections, alerts, and security monitoring use cases; Work with Engineering, DevOps, and other security teams to improve detection coverage and security visibility; Follow, maintain, and contribute improvements to incident response and threat hunting playbooks; Identify recurring issues, detection gaps, and opportunities to improve SOC processes and capabilities; Participate in incident reviews and contribute to lessons learned and remediation activities; Document investigations, findings, and actions clearly and consistently; Collaborate with more experienced analysts during complex investigations and progressively take ownership of more complex security incidents

Requirements

1+ years of experience in a SOC, MDR, or enterprise security team, or equivalent practical cybersecurity experience; Good understanding of common cybersecurity concepts, attack techniques, and adversary TTPs; Familiarity with the MITRE ATT&CK Framework and Cyber Kill Chain; Hands-on experience with or good understanding of SIEM and security monitoring technologies such as Splunk; Familiarity with EDR and other endpoint and network security technologies; Basic scripting or query experience using languages such as Python, PowerShell, KQL, or similar; Familiarity with AWS, Azure, and/or other cloud environments; Basic understanding of web technologies and protocols, including web applications, APIs, and common security threats; Experience performing log analysis and security investigations; Familiarity with threat intelligence concepts and platforms such as MISP or ThreatConnect; Ability to analyze technical information, follow investigative procedures, and identify relevant findings; Good written and verbal communication skills, with the ability to clearly document and communicate technical findings; Bachelor’s degree in Computer Science, Information Security, or a related field, or equivalent practical experience

Nice to have

Experience working in a 24/7 SOC or security operations environment; Experience with detection engineering, security queries, or basic security automation; Familiarity with version control and CI/CD concepts; Familiarity with digital forensics and incident response methodologies; Experience with cloud security monitoring and telemetry

Benefits

Company at the vanguard of the agentic revolution; Real growth opportunities; Structured professional development programs; Professional Development Fund; Internal Mobility Program; Global collective of world-class talent; Inclusive culture