SOC Analyst; Mid​/Senior

Build your future with QnR Group.
JOIN THE NEXT EUROPEAN TECHNOLOGY POWERHOUSE

SOC Analyst | Syste Com, member of QnR Group

We are looking for a SOC Analyst to join security operations teams that monitor, investigate and respond to threats across on-premises and cloud environments. Depending on seniority, you will triage alerts, investigate suspicious activity, improve detections and support shift or on-call operations.

QnR Groupis a technology group with 35 years of experience, 8 companies, 4 delivery centers and 210+ professionals across Greece, Belgium, Cyprus and Poland. Listed on the Athens Stock Exchange since 2000, we deliver mission-critical digital transformation projects for the public and private sector. The Group’s capabilities covers software engineering, enterprise and generative AI, cybersecurity, cloud infrastructure, SAP and Service Now solutions, core banking and maritime intelligence.

Syste Com, a member of QnR Group, specializes in cybersecurity, digital resilience and IT infrastructure. The company delivers solutions and services that help organizations protect their systems and data, strengthen operational continuity and modernize their technology environments. Bringing together security and infrastructure expertise, Syste Com supports businesses across sectors in building secure, reliable and resilient digital operations.

• Monitor and triage alerts from SIEM, EDR/XDR, network and cloud-security platforms
• Investigate events, validate incidents and escalates according to severity and impact
• Document findings, actions and evidence in tickets and incident records
• Support containment, eradication and recovery activities
• At higher levels, lead investigations, improve SOC procedures and mentor analysts

• Practical experience in security monitoring, alert triage or SOC operations, gained through employment, internships, managed services, labs or comparable hands-on work
• Working knowledge of Windows and Linux events, network protocols, identity activity, endpoint telemetry and cloud audit logs
• Hands-on familiarity with at least one SIEM platform and one endpoint security or EDR/XDR platform
• Ability to investigate alerts methodically, distinguish likely false positives from suspicious activity and expand with clear supporting evidence
• Understanding of the incident lifecycle, severity classification, ticket handling, evidence preservation and operational handover
• Clear written and verbal communication in English, with the ability to document timelines, findings, actions and outstanding risks
• Experience tuning detection content, supporting major incidents and coaching less-experienced analysts
• For assignments that include shift or on-call coverage, willingness to work the stated rota

Mid-level and Senior: at least one operations certification, such as Microsoft SC-200, CompTIA CySA+, GIAC GSEC/GCIH or a recognised SIEM/EDR vendor certification

• CompTIA Security+, SC-200, GSEC, CySA+, vendor SIEM/EDR certifications or equivalent experience
• Exposure to shift-based operations, MSSP environments or regulated sectors