Senior SOC Analyst

Pracovní nabídka

Senior SOC Analyst (Tier 3) (m/f)

Join our global Security Operations team

Are you an experienced cybersecurity professional who enjoys solving complex security incidents and working with modern security technologies?

We are looking for a Senior SOC Analyst (Tier 3) to join our global Security Operations team. You will act as the key internal escalation point for our Managed Detection and Response (MDR) provider, lead complex investigations, and drive security incidents through to resolution.

You will also contribute to global security projects, threat hunting, detection engineering, and security audits including NIST, ISO and TISAX.

What will you do?

• Serve as the internal escalation point for incidents escalated by our MDR provider
• Lead containment, eradication and recovery activities for confirmed security incidents
• Conduct complex investigations, root cause analysis and forensic reviews across endpoint, identity, network and cloud environments
• Perform proactive threat hunting using KQL in Microsoft Sentinel and Microsoft Defender XDR
• Develop and tune detection rules, analytics and correlation logic
• Review MDR escalations and help continuously improve detection quality and coverage
• Turn threat intelligence, IOCs and TTPs into practical detections and threat-hunting activities
• Work closely with Infrastructure, IT, GRC and regional Security teams
• Support NIST, ISO and TISAX audits by providing operational evidence and control validation
• Participate in tabletop exercises and purple team activities
• Contribute to SOC reporting including incident trends, MTTD, MTTR and key threats
• Continuously improve SOC playbooks, runbooks and incident response procedures
• Mentor junior colleagues and share your expertise across the global Security Operations team

What do we expect from you?

• 3+ years of experience in a SOC or Security Operations environment
• Hands-on experience with escalated incidents and complex security investigations
• Strong practical knowledge of Microsoft Sentinel and Microsoft Defender XDR
• Experience with KQL, threat hunting and detection engineering
• Good understanding of TCP/IP, DNS, HTTP/S and common network protocols
• Understanding of Windows, Linux and macOS internals and logging
• Knowledge of cloud security, particularly Azure and Microsoft 365
• Knowledge of Entra ID / Active Directory and Identity & Access Management concepts
• Working knowledge of MITRE ATT&CK and the cyber kill chain
• Professional fluency in English
• Strong analytical and problem-solving skills
• Ability to work independently and collaborate with international teams across different time zones
• Willingness to participate in an after-hours on-call rotation for major incidents and occasionally travel

Nice to have

• 5+ years of experience in Security Operations, including experience at Tier 2 or Tier 3 level
• Digital forensics experience
• Experience with SOAR platforms and automated playbooks
• Scripting skills in PowerShell, Python or Bash
• Experience with Threat Intelligence platforms and IOC management
• Incident command or bridge-lead experience in an international environment
• University degree in Computer Science, IT, Cybersecurity or a related field
• Certifications such as SC-200, GCIH, GCIA, GCFA, GCFE, OSCP, CCNA or CISSP

What do we offer?
🏖️ 5 weeks of vacation
🍽️ Meal allowance / modern company canteen
💼 Stable full-time employment with an international company
📚 Professional training and development opportunities
🎓 Support for relevant professional certifications
🌍 International working environment and cooperation with global teams
💻 Opportunity to work with modern cybersecurity technologies including Microsoft Sentinel and Defender XDR
🚀 Real opportunity to influence security processes, detection capabilities and the development of our global SOC

Interested?
If you have experience with complex security incidents and want to take the next step in your cybersecurity career, send us your CV.

We would be happy to tell you more about the position, our Security Operations team and the challenges you could work on with us.