INIX Group is looking for a SOC Analyst Tier 2 to join the team and carry out cyber detection & response activities.
The role
The SOC Analyst Tier 2 is the key figure in managing security incidents. They receive escalations from Tier 1, conduct in-depth analysis, coordinate incident response and actively contribute to the continuous improvement of SOC operational processes. The role requires decision-making autonomy, solid technical foundations and the ability to work effectively under pressure.
Main responsibilities
- Handling Tier 1 escalations with in-depth incident analysis
- Correlating events across multiple sources (SIEM, EDR, NDR, system and network logs)
- Reconstructing the kill chain and assessing the impact on client assets
- Coordinating incident response and communicating with the client
- Proactive threat hunting on a periodic basis
- Reviewing and improving Tier 1 operational playbooks
- Using MISP to correlate and share indicators of compromise (IoC)
- Producing post-incident technical reports
Requirements
- At least 2–3 years of experience in SOC, incident response or equivalent
- Command of at least one enterprise SIEM (Splunk, Microsoft Sentinel, QRadar, Wazuh or equivalent)
- Knowledge of the MITRE ATT&CK framework and the kill chain
- Ability to analyze logs, network traffic (pcap) and endpoint telemetry
- Experience with EDR/XDR solutions (CrowdStrike, SentinelOne, Microsoft Defender or equivalent)
- Experience with SOAR/IR platforms such as Cortex XSOAR for incident management and automation
- Use of threat intelligence platforms such as MISP for IoC correlation
- Scripting skills for automation and analysis (Python, PowerShell or Bash)
- Good written and spoken technical communication skills, in Italian and English
Preferred qualifications
- Certifications: CompTIA CySA+, GIAC GCIH, GIAC GCIA, CEH or equivalent
- Previous experience in MSSP or multi-tenant environments
- Knowledge of Wazuh deployment and rule tuning
- Basic knowledge of digital forensics or malware analysis
Training path
For the Tier 2 role we invest in technical specialization and growth towards roles of greater responsibility:
- Access to advanced training on platforms such as HackTheBox Enterprise and SANS OnDemand, focusing on incident response, threat hunting and forensic analysis
- Full certification support, with exam fees reimbursed for: GIAC GCIH, GIAC GCIA, CompTIA CySA+, CEH and vendor certifications (Splunk Core, Microsoft SC-200)
- Participation in threat intelligence sharing through industry communities and platforms, with hands-on use of MISP in real scenarios
- Regular internal workshops on offensive and defensive techniques, with practical sessions in dedicated lab environments
- Mentorship from the Tier 3 and IR teams, with progressive involvement in incident response on complex cases
- A career path towards senior roles: Tier 3 Analyst, Threat Hunter, IR Specialist or SOC Team Lead, with a shared roadmap and annual review
What we offer
- Hands-on work on real and varied scenarios thanks to the multi-client environment
- Enterprise tools and mature processes
- Permanent contract; gross annual salary: €35,000 – €48,000, based on experience and certifications
- Working arrangement: on-site / hybrid — Location: Milan, Rome, Naples
Where will you work?
INIX Group Italia Srl is a well-established IT company serving Central Public Administration, Healthcare and the Private Sector. Given the company’s strong growth, we are looking for new talent eager to grow with us. As a company we are committed to valuing every person, giving them the right space to show their skills and talent.
Want to know more?
Send us your updated, detailed CV including your authorization to process personal data pursuant to Law 196/03 and art. 13 GDPR 679/16.
Pursuant to Laws 903/77 and 125/91, this position is open to all genders, ages and nationalities, in accordance with Legislative Decrees 215/03 and 216/03.