Security Operations Center Analyst (T2)

Jacob; Kraków; Híbrido; PLN 90.000 - 140.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Private medical care

Life insurance

Flexible benefits

Hybrid work option

Descripción de la vacante

Jacobs Engineering Group is seeking a SOC Tier 2 Analyst to strengthen our Security Operations Center. You will perform advanced monitoring, investigations, and coordinate security events, bridging Tier 1 activities with Incident Response teams.

You’ll guide junior analysts and help improve SOC detections. You will join a global company delivering critical infrastructure projects and innovative technologies.

Formación

• 2+ years of experience in SOC or cyber security role.
• Proficiency with SIEM and SOAR platforms.
• Solid understanding of network security, Windows/Linux internals, and authentication models.
• Ability to perform log correlation, timeline building, and evidence triage.
• Working knowledge of scripting languages (Python or PowerShell).
• Knowledge of threat intel platforms and detecting from TTPs/IOCs.
• Familiarity with compliance/regulatory environments affecting SOC operations.

Responsabilidades

• Monitor security alerts and perform triage in SIEM/SOAR queues.
• Investigate escalated events and support Tier 1 analysts.
• Develop and validate new SOC detections and use cases.
• Coordinate shift coverage and produce daily/weekly summaries.
• Troubleshoot basic SIEM issues and coordinate with Tier 3.

Conocimientos

SOC operations

SIEM & SOAR

EDR

Network security basics

Windows/Linux basics

Scripting: Python/PowerShell

Threat intelligence

Educación

Bachelor’s degree in Computer Science or Cyber Security

Herramientas

SIEM

SOAR

EDR

Sandboxing

Descripción del empleo

At Jacobs, we're challenging today to reinvent tomorrow by solving the world's most critical problems for thriving cities, resilient environments, mission-critical outcomes, operational advancement, scientific discovery and cutting-edge manufacturing, turning abstract ideas into realities that transform the world for good.

Your impact

At Jacobs, we deliver projects that truly make a difference — from smart manufacturing and sustainable water systems to modern infrastructure and cutting-edge technologies. Our solutions support the development of cities, industries, and innovation, addressing today’s challenges both locally and globally.

The SOC Tier 2 Analyst is an experienced member of the Security Operations Center, responsible for advanced monitoring,investigation, and coordination of security events. This role serves as the bridge between Tier 1 monitoring activities and higher level incident response teams, ensuring timely triage, deeper analysis, and smooth operational workflow. The Tier 2 Analyst also provides guidance to Tier 1 analysts and contributes to the continuous improvement of SOC processes and detections.

Key Responsibilities:

• Security Monitoring & Incident Handling
  • Perform all core Tier 1 monitoring duties, including:
    • Reviewing and responding to alerts in SIEM/SOAR queues.
    • Monitoring SOC dashboards, EDR, and team mailboxes for security related events.
    • Tracking team-related SNOW tickets and ensuring timely handling.
    • Observing health dashboards, identifying anomalies, and notifying Tier 3 when needed.
    • Ensuring consistency across security systems and reporting any discrepancies.
    • Triaging and remediating alerts, escalating complex cases to Tier 3 or Incident Response teams (CIRT).
• Advanced Analysis & Support
  • Conduct deeper investigation of security events escalated from Tier 1.
  • Support Tier 1 analysts with unusual or ambiguous cases, providing guidance and technical direction.
  • Work on improving and validating new detection rules and assisting with enhancements to existing SOC use cases.
• Operational Coordination
  • Coordinate team schedules and ensure proper coverage within the shift.
  • Reassign workload or tasks within the team when necessary, especially during peak activity or heavy case volumes.
  • Prepare and distribute daily and weekly summaries highlighting notable detections, trends, and observations.
• Technical Troubleshooting
  • Perform basic SIEM troubleshooting tasks

We offer:

• The opportunity to work in an experienced team within a global company operating across all areas of infrastructure investment.
• A comprehensive benefits package: private medical care, additional life insurance, flexible benefits selection via the MyBenefit platform, support for employees and their families in challenging life situations, and much more.
• Option to work from the office or in a hybrid model.
• Learn more about our benefits and work culture here !

Here’s what you’ll need

• Willingness to work 12-hour shifts, with every other weekend off (Panama Shift Schedule)
• 2+ years experience in SOC or other Cyber Security related role.
• Proficiency with SIEM and SOAR platforms.
• Solid understanding of network security (firewalls, IDS/IPS), Windows/Linux internals, and authentication/authorization models (Kerberos, OAuth, SAML).
• Ability to perform log correlation, timeline building, and evidence triage using common tools (EDR, SIEM, sandboxing, packet capture).
• Working knowledge of scripting languages like Python or PowerShell for investigation, data parsing, and workflow automation.
• Knowledge of threat intelligence platforms and creating detections from TTPs/IOCs.
• Practical knowledge of compliance/regulatory environments and how they influence SOC operations.

Nice to have:

• Bachelor’s degree in Computer Science or Cyber Security.
• Knowledge of programming languages (C#, Java, etc.).
• GitHub/Git or other version control system experience.
• Knowledge of database administration and writing queries (SQL).
• Understanding of server administration in both Linux and Windows platforms.

We believe that by being inclusive, we bring ourselves closer together and foster greater creativity. We welcome people as they are. Learn more here .

Join us and build your career in an international environment, alongside people who are passionate about shaping the future.

#LI-MP3

Your application experience is important to us, and we’re keen to adapt to make every interaction even better. If you require further support or reasonable adjustments with regards to the recruitment process (for example, you require the application form in a different format), please contact the team via Careers Support .