Описание
The project provides cybersecurity and digital services to international organizations in a complex multi-tenant environment. It includes cyber defense operations, security incident management, and continuous protection of critical systems and services.
Задачи
•Investigate alerts escalated from L1/L2 across endpoint, network, email, and identity
•Determine whether alerts are true incidents, assess their scope, and escalate confirmed incidents to Incident Response
•Investigate email and identity threats in Microsoft 365 and Entra ID, including phishing, suspicious sign-ins, and account compromise
•Propose detection tuning and new use cases to the SIEM team based on investigation findings
•Write detailed case notes and periodic reports
•Participate in shifts and on-call rotation as defined in the request
Требования
•At least 4 years of cybersecurity experience, including 1–2 years in a Tier 2 SOC
•Hands-on experience with at least one major SIEM and at least one EDR/XDR tool
•Investigation skills across endpoint, network, email, and identity, including Microsoft 365 and Entra ID
•Ability to write queries in KQL, SPL, or equivalent
•Working knowledge of MITRE ATT&CK and common attack techniques
•Readiness for shift work and on-call rotation
•Clean record and readiness for background verification
•Upper-Intermediate English or above
Будет плюсом
•CySA+, SC-200, BTL1/BTL2, or GCIH certifications
•Threat hunting experience
•MSSP or multi-tenant SOC experience
•SOAR experience
•Network traffic analysis using Wireshark, Zeek, or IDS/IPS
•Python or PowerShell scripting
Условия
•Additional earnings of up to 1,000 EUR per month, depending on expertise, included in the annual bonus
•Opportunity to change projects and develop expertise in a business domain
•Mentoring and onboarding systems for each new employee
•Corporate training portal with an updated company knowledge base
•Corporate events and refreshments, including parties, pizza days, PlayStation, fruit, coffee, snacks, and movies
•Certification compensation, including AWS and PMP
•Referral program
•Private health insurance and sports compensation, depending on the type of employment
Locations: Austria, Belgium, Bulgaria, Croatia, Cyprus, Czech Republic, Denmark, Estonia, Finland, France, Germany, Hungary, Italy, Latvia, Lithuania, Luxembourg, Poland, Portugal, Romania, Slovakia, Slovenia, Spain, Sweden, and the Netherlands
