Are you a SOC Analyst? Think bigger about your next move!
Build your future with QnR Group.
JOIN THE NEXT EUROPEAN TECHNOLOGY POWERHOUSE 🚀
SOC Analyst | SysteCom, member of QnR Group
Role overview
We are looking for a SOC Analyst to join security operations teams that monitor, investigate and respond to threats across on-premises and cloud environments. Depending on seniority, you will triage alerts, investigate suspicious activity, improve detections and support shift or on-call operations.
About QnR Group
QnR Group is a technology group with 35 years of experience, 8 companies, 4 delivery centers and 210+ professionals across Greece, Belgium, Cyprus and Poland. Listed on the Athens Stock Exchange since 2000, we deliver mission-critical digital transformation projects for the public and private sector. The Group’s capabilities covers software engineering, enterprise and generative AI, cybersecurity, cloud infrastructure, SAP and ServiceNow solutions, core banking and maritime intelligence.
About SysteCom
SysteCom, a member of QnR Group, specializes in cybersecurity, digital resilience and IT infrastructure. The company delivers solutions and services that help organizations protect their systems and data, strengthen operational continuity and modernize their technology environments. Bringing together security and infrastructure expertise, SysteCom supports businesses across sectors in building secure, reliable and resilient digital operations.
Requirements
What you'll work on:
- Monitor and triage alerts from SIEM, EDR/XDR, network and cloud-security platforms
- Investigate events, validate incidents and escalate according to severity and impact
- Document findings, actions and evidence in tickets and incident records
- Support containment, eradication and recovery activities
- At higher levels, lead investigations, improve SOC procedures and mentor analysts
What you bring:
- Practical experience in security monitoring, alert triage or SOC operations, gained through employment, internships, managed services, labs or comparable hands-on work
- Working knowledge of Windows and Linux events, network protocols, identity activity, endpoint telemetry and cloud audit logs
- Hands-on familiarity with at least one SIEM platform and one endpoint security or EDR/XDR platform
- Ability to investigate alerts methodically, distinguish likely false positives from suspicious activity and escalate with clear supporting evidence
- Understanding of the incident lifecycle, severity classification, ticket handling, evidence preservation and operational handover
- Clear written and verbal communication in English, with the ability to document timelines, findings, actions and outstanding risks
- Experience tuning detection content, supporting major incidents and coaching less-experienced analysts
- For assignments that include shift or on-call coverage, willingness to work the stated rota
Required certifications:
Mid-level and Senior: at least one operations certification, such as Microsoft SC-200, CompTIA CySA+, GIAC GSEC/GCIH or a recognised SIEM/EDR vendor certification
Nice to have:
- CompTIA Security+, SC-200, GSEC, CySA+, vendor SIEM/EDR certifications or equivalent experience
- Exposure to shift-based operations, MSSP environments or regulated sectors