• Assess vulnerabilities in applications, APIs, libraries, components, and pipelines. • Support squads in remediating vulnerabilities and adopting secure development practices. • Operate and enhance SAST, DAST, and SCA tools, API security solutions, and bot protection. • Support vulnerability management by prioritizing risks based on criticality and exposure. • Perform technical risk analyses of applications, integrations, and digital user journeys. • Contribute to secure development standards, technical guides, checklists, and training. • Support automation, shift-left initiatives, and continuous security improvements across the SDLC.

Role Description Everforth ECS is seeking a SOC Analyst II to work Remotely. Please Note: This position is contingent upon contract award. - Performs SOC Tier 1–3 continuous monitoring of SIEM, SOAR, EDR, IAM, DLP, vulnerability management, and other automated security platforms. - Conducts triage, threat analysis, threat hunting, correlation, enrichment, risk mitigation, and incident response activities. - Documents investigations and artifacts in accordance with IRS and DHS reporting requirements and supports insider threat program and forensic collection. - Collaborates with senior analysts and incident response teams to mitigate risks, enhance security monitoring capabilities, and improve the organization's security posture. Qualifications - Bachelors’ Degree in Cybersecurity, IT, or related field. - 3+ years of SOC experience. - IRS CI - IRS High Risk Clearance. - Knowledge of SIEM, SOAR, EDR, DLP, IAM/PAM tools. - Experience with incident response, threat intelligence, threat hunting, triage, and investigation. - Understanding of federal incident reporting (NIST 800-53, FISMA, IRM 10.8, DHS/Treasury requirements). - Ability to document cases and perform forensic support.

• Monitor and triage alerts from security tools (SIEM, EDR/XDR, firewalls, email security, cloud security platforms) • Conduct initial investigation and documentation of potential security incidents and escalate as needed • Assist with identity and access management tasks, including user provisioning, access reviews, and MFA/SSO support • Support vulnerability scanning cycles and help track remediation progress • Perform routine security checks to ensure tools and controls are functioning as expected • Assist with researching new threats, vulnerabilities, and security best practices • Support security awareness initiatives and phishing simulation programs • Participate in security incident response activities under guidance from senior staff • Assist in maintaining security documentation, policies, procedures, and reports • Collaborate with IT teams and the MSSP to resolve security-related tickets and inquiries • Support configuration and tuning of existing security solutions under supervision • Work closely with our Managed Security Services Provider (MSSP) and IT teams to review alerts and investigate security incidents • 24/7 Availability for Identity & Access Management, Security Incident Response and Escalation • Performs other related job duties, as assigned

Role Description Eurofins is expanding its Security Operations Centre (SOC) and is looking to strengthen the SOC Consultant (SOC IR L3) Incident Response team. In this role, you will handle the most complex security incidents, leading deep investigations and driving effective remediation actions. As a SOC IR L3 Consultant, you will play a key role in the Security Incident Management process—leading resolution efforts, collaborating with cross-functional teams, and applying your expertise to continuously improve the organization’s overall security posture. The role also includes participation in a 24/7 on-call rotation, shared among team members, to ensure timely response to critical security incidents. Qualifications - 5+ years of experience in SOC, Incident Response, DFIR (Digital Forensics and Incident Response), Threat Hunting, or Security Operations. - Deep understanding of: - Windows, Linux, and Active Directory - Networking (TCP/IP, DNS, HTTP/S, SMTP, VPN, RDP) - Cloud security (Azure, M365, AWS, or GCP) - Identity and Access Management - Strong knowledge of MITRE ATT&CK, Cyber Kill Chain, IOC and TTP analysis. Requirements - Incident Response - Lead and conduct end-to-end investigations and containment, eradication, recovery, and lessons-learned activities. - Coordinate major incidents with technical and business stakeholders. - Develop and maintain SOC procedures and processes. - Conduct host-based and network-based forensic analysis. - Ability to conduct memory investigation and malicious code investigation. - Digital Forensics & Malware Analysis - Memory forensics (Volatility). - Knowledge from appropriate forensic data acquisition tools (FTK, Autopsy, EnCase, X-Ways). - Windows artifact analysis (Prefetch, Event Logs, Registry etc.) - Malware triage and reverse-engineering fundamentals. - Ability to determine root cause and attack path. - Endpoint & Network Security - Experience with EDR solutions. - Ability to investigate network logs. - Soft Skills - Excellent analytical and problem-solving skills. - Ability to work independently during critical incidents. - Strong high-level communication. - Ability to write executive-level incident reports and post-incident reports. - Leadership Expectations - Mentor L1/L2 analysts. - Lead and conduct investigations with minimal supervision. - Drive improvements in detection capabilities and incident readiness. - Develop playbooks, procedures, and response processes. Benefits - Very attractive, multicultural and friendly work environment in a fast-growing international company (more than 50,000 employees now). - Possibility to grow and make the next step in your professional career and self-development. - Long-term relationship and competitive salary package and bonus. - Medical and life insurance. - Possibility of remote working and flexible working hours.