Onwelo

SOC Tier 2 Analyst (Cybersecurity)

In short

This SOC Tier 2 Analyst role involves analyzing and handling security incidents, escalating complex cases to Tier 3, correlating events from logs, and creating/optimizing SIEM and EDR detection rules. The company is Onwelo, a technology partner with 400+ specialists serving large clients in Poland, Europe and the USA. The role requires 2-3 years of SOC/cybersecurity experience, familiarity with SIEM tools (Splunk, QRadar, Sentinel or Elastic Stack), networking and Windows/Linux knowledge, basic MITRE ATT&CK understanding, and English at B2 level. Hybrid or remote work is offered.

About Onwelo
Onwelo is a technology partner delivering end-to-end services — from strategy and architecture, through implementation, to maintenance — in digital transformation, data and automation. The team numbers over 400 specialists with strong senior-level competencies, with 300+ completed projects for large organizations in Poland, Europe and the USA. The company operates from several Polish cities and offices in Germany, Switzerland and the USA, combining local presence with global reach.
About the project
We are looking for a SOC Tier 2 Analyst for our cybersecurity team, who will be responsible for analyzing and handling security incidents and supporting the Tier 1 team. If you have experience in threat analysis and want to grow in a dynamic SOC environment – we invite you to apply.
Your tasks
•Analysis and handling of security incidents (Tier 2)
•Escalation of complex events and cooperation with the Tier 3 team
•Correlation of events and identification of threats based on logs
•Describing events and documenting them in the system
•Connecting new log sources (e.g. servers, applications, network devices)
•Creating and optimizing detection rules (SIEM, EDR)
•Cooperation with IT and security teams
•Creating documentation and incident reports
Who we are looking for
•A person with at least 2–3 years of experience in SOC or cybersecurity
•Experience using Elastic Stack or SIEM tools (e.g. Splunk, QRadar, Sentinel)
•Knowledge of networking (TCP/IP, DNS, HTTP), Windows/Linux systems
•Ability to analyze logs (Windows, Linux, applications)
•Basic knowledge of MITRE ATT&CK
•Good communication in English (min. B2)
•Certifications (e.g. Security+, CySA+, CEH, GCIA)
•First experience in pentesting - nice to have
•Experience in audits - nice to have
What we offer
•Flexible hours and the possibility of hybrid or remote work
•Participation in interesting projects for global clients
•As much as 80% of promotions in the company happen internally
•90% of management staff has a technical education
•Access to internal training and development paths
•Participation in team events, company meetings and Town Halls
•Support in building a professional image (personal branding)
•Access to life insurance and private medical care for yourself and your family
•MultiSport card, which supports health and fitness care

Stop applying.
Get referred.

$10 in free credits

In just 60 seconds, fully on autopilot — Eraldt's AI agents read your CV, map the roles you fit, find live vacancies and the people who can refer you, write personal emails, and get you referred.

This isn't an application: your CV doesn't go to the company, and we don't promise a referral for this exact role.

Discover who else lands interviews on autopilot