Remote Junior SOC Security Engineer: AI Threat Hunting

RTB House; Warszawa; On-site; PLN 70,000 - 110,000; Full time

Benefits offered by this job

Remote work (fully)

Flexible schedule

Cutting-edge technology

Job summary

RTB House is seeking a Junior SOC Security Engineer to monitor IT infrastructure, triage SIEM/EDR alerts, and escalate incidents per procedures. You will analyze malware payloads, IoCs, and behavior to detect anomalies and unauthorized activity.

You will contribute to AI-driven threat hunting by interpreting AI-derived hypotheses and documenting findings. You will respond to incidents, verify alerts, and support the SOC team in daily operations while developing automation and scripting skills.

Qualifications

• Experience in a SOC environment at an L1 level (min 1 year).
• Fluency in English & Polish (min B2).
• Threat analysis and incident response skills.
• Knowledge of SIEM tools (Splunk Enterprise Security).
• Knowledge of XDR/EDR solutions (SentinelOne).
• Knowledge of network protocols (TCP/IP, HTTPS, DNS).
• Willingness to develop skills towards automation and scripting (Python/Bash).
• Knowledge of MITRE ATT&CK and NIST frameworks.

Responsibilities

• Respond to incidents in accordance with established procedures.
• Verify alerts from SIEM/EDR/XDR systems.
• Support more experienced team members in developing tools or implementing new security solutions.
• Escalate complex cases and support the SOC in daily operations.

Skills

English (B2)

Polish (B2)

Threat analysis

Incident response

Python/Bash

Networking fundamentals

MITRE ATT&CK

NIST

SOC operations

Tools

Splunk Enterprise Security

SentinelOne

Job description

RTB House is seeking a Junior SOC Security Engineer to monitor IT infrastructure, triage SIEM/EDR alerts, and escalate incidents per procedures. You will analyze malware payloads, IoCs, and behavior to detect anomalies and unauthorized activity.

You will contribute to AI-driven threat hunting by interpreting AI-derived hypotheses and documenting findings. You will respond to incidents, verify alerts, and support the SOC team in daily operations while developing automation and scripting skills.