We’re not just a company — we’re a global force, fiercely committed to ensuring that everyone, everywhere, can live their digital lives safely.
Our family of brands – Norton, Avast, LifeLock, Avira, AVG, ReputationDefender, and CCleaner – unites the brightest minds, the sharpest technology, and the most diverse perspectives to protect over 500 million people worldwide.
We’ve built an inclusive workplace where your well-being is a priority, because true success comes from balance and authenticity. When you’re thriving, you’re unstoppable. So bring your bold ideas and passion that never quits.
The digital world isn’t some distant reality – it’s the world we live in, and we’re ready for it. If you’re ready to push boundaries and be part of something bigger, join #TeamGen.
HOW WE WORK
As part of Gen Digital’s global Security Operations Center (SOC), you’ll help protect our systems, users, and data by monitoring, analyzing, and responding to security events across a diverse technology landscape.
The SOC operates in a follow-the-sun model, with regional sub-teams covering their respective weekday business hours — ensuring 24/7 visibility and rapid incident response across the globe.
You’ll collaborate closely with experienced analysts, security engineers, and incident responders to detect and mitigate threats in real time, continuously improving detection accuracy and operational efficiency in a dynamic, enterprise-scale environment.
MISSION & GOALS
As a Security Operations Analyst, you’ll play a key role in protecting Gen Digital’s infrastructure and data.
You’ll monitor alerts, investigate potential incidents, and apply security frameworks to identify and mitigate threats — contributing to a stronger, more resilient global cybersecurity posture.
This role offers real opportunities to develop professionally, gain hands-on experience with enterprise technologies, and make an impact as part of a collaborative, international security team.
OBJECTIVES
- Monitor security alerts and events across SIEM, EDR (Windows, Linux, macOS), cloud-native tools, and threat intelligence platforms.
- Review and analyze logs from endpoints, cloud services, identity systems, and network infrastructure.
- Apply networking knowledge (TCP/IP, DNS, HTTP/S) to identify anomalies and potential threats.
- Use frameworks such as MITRE ATT&CK to understand attacker behavior and guide investigations.
- Collaborate with team members to fine-tune detection rules, improve alert fidelity, and reduce false positives.
- Document detection logic, investigation workflows, and best practices.
- Participate in threat reviews, team meetings, and knowledge-sharing sessions.
- Stay informed about emerging cyber threats and trends relevant to SOC operations.
COMPETENCIES
Technical foundation:
- Basic understanding of networking concepts (TCP/IP, DNS, HTTP/S).
- Familiarity with cybersecurity principles and common threat types (phishing, malware, brute force).
- Comfort working with logs, alerts, and structured data.
- Exposure to SIEM, EDR, ticketing systems, or cloud platforms (AWS, Azure, GCP) is a plus.
- Experience with security automation, SOAR platforms, API integrations, or programming is an advantage.
- Understanding of frameworks like MITRE ATT&CK.
Education & experience:
- Degree in Information Technology or a related field, ideally with a focus on cybersecurity.
- Internship or lab experience in a cybersecurity-related role is a plus.
Soft skills:
- Strong analytical thinking and attention to detail.
- Eagerness to learn and grow within a global security environment.
- Clear communication skills in English (written and spoken).
WHAT WE OFFER
- Annual bonus scheme
- Unlimited PTO and flexible working hours
- Opportunity to join a global tech company listed on the S&P 500
- Collaboration with experts in Digital Security and MarTech
- Cafeteria points via Benefit Plus (meals, pension, travel, leisure, Multisport, and more)
- Tuition reimbursement for job-related courses
- Personalized Learning & Development plan
- Sustainable home improvement bonus
