Europe-Based SOC Analyst: Hands-On SIEM & DLP

EOR - Europe; Polska; Ibrido; PLN 140.000 - 210.000; Tempo pieno

Descrizione del lavoro

Kognitiv is seeking a Cybersecurity SOC Analyst to investigate security alerts, improve detection rules, and monitor data movement across our environment. You will support global operations with European time-zone coverage, focusing on SIEM (Rapid7 InsightIDR) and DLP tooling in a hands-on role.

You'll work with our team to tune detections, automate triage, and stay ahead of threats across endpoints and cloud services.

Competenze

• 2–4 years hands-on SOC analyst experience with SIEM platforms.
• Practical experience with Rapid7, Splunk or Microsoft Sentinel in real investigations.
• Experience with DLP tools and investigating data loss or transfers.
• Scripting or programming for security analysis (LEQL, KQL, SPL or Python).
• Understanding IT systems, networks and cloud architectures.
• EDR experience alongside SIEM and DLP work.
• Methodical approach to investigations and log data analysis.

Mansioni

• Monitor, triage and investigate security alerts across SIEM platforms.
• Write and tune detection rules correlating events from multiple sources (including EDR signals).
• Identify opportunities to automate triage and reduce manual effort.
• Review DLP events to detect inappropriate data transfers.
• Collaborate with colleagues to understand flagged activity and investigate concerns.
• Apply knowledge of protected tech to distinguish suspicious from normal activity.
• Track threats, malware and cloud vulnerabilities; contribute to incident response playbooks.

Conoscenze

SOC analysis

SIEM usage

Threat detection

EDR tools

Scripting

Formazione

Relevant technical degree

Strumenti

Rapid7 InsightIDR

Splunk

Microsoft Sentinel

SentinelOne

Cyberhaven

Descrizione del lavoro

Kognitiv is seeking a Cybersecurity SOC Analyst to investigate security alerts, improve detection rules, and monitor data movement across our environment. You will support global operations with European time-zone coverage, focusing on SIEM (Rapid7 InsightIDR) and DLP tooling in a hands-on role.

You'll work with our team to tune detections, automate triage, and stay ahead of threats across endpoints and cloud services.