SOC Analyst – Follow-the-Sun Shift (UTC 20:00-05:00)

About the role

UBQ.io, a global technology services provider, is hiring a SOC Analyst for its global follow-the-sun Security Operations Center. The role covers the 20:00-05:00 UTC shift and reports to the SOC Lead. It focuses on investigating alerts end to end, responding to real threats and ensuring clean handovers between regions, in a fast-paced, fully remote setting.

Key responsibilities

• Monitor, triage and analyse security alerts from the security stack (SIEM, EDR, SSE, WAF)
• Investigate incidents from triage through containment, eradication and post-incident documentation
• Determine scope, severity and impact, separate true positives from false positives and escalate confirmed incidents
• Execute response actions such as isolating endpoints, blocking indicators and disabling compromised accounts
• Ensure structured shift handovers in the follow-the-sun model
• Proactively threat hunt across endpoint, network and log data, mapped to MITRE ATT&CK
• Contribute to tuning SIEM correlation rules, EDR and WAF detections
• Enrich investigations with threat intelligence and maintain incident response playbooks
• Collaborate with IT, infrastructure, application and security teams and support vulnerability management

Required profile

• Bachelor's degree in IT, cybersecurity, computer science or a related field, or equivalent practical experience
• At least 3 years of hands-on SOC experience in a production environment
• Experience with incident response and threat hunting, ideally with MITRE ATT&CK
• Experience in a 24/7 or follow-the-sun SOC is a plus
• Strong analytical, troubleshooting and problem-solving skills, good written and verbal English, and comfort working across time zones

Required skills

• Working knowledge of EDR, SSE, SIEM and WAF, with hands-on implementation, configuration and tuning a big plus
• Understanding of network, endpoint, cloud and Zero Trust security
• Certifications such as Security+, CySA+, GCIA, GCIH, BTL1 or vendor-specific ones are a plus