Security Operations Center Analyst

This is a fully remote position, open to applicants in Poland.

📋 Description

• Oversee and prioritize security alerts

• Develop, test, and enhance detection mechanisms across Mac, Linux, and Windows platforms

• Evaluate security incidents such as malware, phishing, and advanced persistent threats utilizing SIEM and EDR tools

• Engage in proactive threat hunting with SIEM and EDR solutions

• Investigate and address incidents in accordance with established response protocols

• Record findings and offer actionable remediation suggestions

• Collaborate with IT, engineering, DevOps, SOC analysts, incident response teams, and threat hunters

• Enhance security measures and reduce vulnerabilities by working with cross-functional teams

• Stay informed about emerging threats, vulnerabilities, and industry trends through independent learning

• Participate in an on-call rotation for round-the-clock SOC coverage

• Elevate confirmed or suspicious incidents to the Incident Response team

⛳️ Requirements

• 4–5+ years of experience in a SOC and/or active involvement in incident response teams

• Practical experience with CrowdStrike or other EDR platforms

• Experience in triaging security incidents and alerts within a high-volume setting

• Proficiency in writing CrowdStrike Query Language (CQL) or similar queries and developing detections

• Familiarity with threat intelligence feeds, platforms, and OSINT tools such as VirusTotal

• Knowledge of forensic analysis and evidence management

• Strong grasp of cybersecurity principles, threat landscapes, and attack vectors

• Expertise in analyzing logs, network traffic, and endpoint data using CrowdStrike Next-Gen SIEM

• Primary proficiency in Mac and Linux systems; secondary familiarity with Windows

• Understanding of incident response processes and methodologies

• Preferred proficiency in scripting languages, such as Python, for automating SOC workflows

• Experience in creating playbooks in CrowdStrike Fusion SOAR or a similar SOAR platform is preferred

• Knowledge of cloud security across GCP, AWS, and/or Azure is preferred

• Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, or a related field, or equivalent experience is preferred

• Ability to thrive in a fast-paced, high-pressure remote environment

• Outstanding critical thinking, analytical, decision-making, and attention-to-detail skills

🏝️ Benefits

• Remote work arrangement

• Participation in 24x7x365 SOC on-call rotation

• Opportunities for professional development and continuous learning

• A diverse and inclusive workplace

• Opportunities to engage across various company domains

• Access to all areas of the company

• Ownership of projects

• A flat and streamlined management structure