Security Operations Center (SOC) Senior Analyst

BeOne Medicines Ltd.; Warszawa; Hybrid; PLN 259,000 - 324,000; Full time

Job summary

BeOne Medicines Ltd. seeks a SOC Senior Analyst to drive detection, analysis, and response to cybersecurity threats within BeOne’s security operations.

You will report to the Senior Manager Information Security Operations and collaborate with IT, leadership, and partners to enhance incident response capabilities. You will lead SIEM/EDR/IDS/IPS/SOAR operations, tune detection rules, and support audits while staying current with security trends and technologies.

Qualifications

• 3+ years in a SOC or equivalent security role with incident response exposure.
• Strong knowledge of cyber kill chain and MITRE ATT&CK frameworks.
• Experience with log analysis, network traffic, and threat triage.

Responsibilities

• Lead analysis of SIEM alerts, endpoint telemetry, network traffic, and threat intel.
• Develop detection rules, correlation logic, and alert thresholds to reduce false positives.
• Oversee SOC tools' configuration, optimization, and health (SIEM, EDR, IDS/IPS, SOAR, firewalls).
• Support audits, risk assessments, and security control evaluations.
• Participate in on-call rotations and act as escalation point for incidents.

Skills

SOC operations

Threat analysis

Incident response

MITRE ATT&CK

Forensic analysis

Scripting

Communication

Education

Bachelor's degree

Tools

SIEM

EDR

IDS/IPS

SOAR

Firewalls

Job description

BeOne continues to grow at a rapid pace with challenging and exciting opportunities for experienced professionals. When considering candidates, we look for scientific and business professionals who are highly motivated, collaborative, and most importantly, share our passionate interest in fighting cancer.

General Description

As a SOC Senior Analyst, you will play a critical role in BeOne’s Information Security Operations, contributing to the detection, analysis, and response to cybersecurity threats. Reporting to the Senior Manager Information Security Operations, you will work closely with IT teams, security leadership, and third‑party partners to monitor, investigate, and mitigate potential security incidents. Your expertise will drive continuous improvement in SOC processes, tools, and incident response capabilities while aligning with industry best practices.

Essential Functions Of The Job

• Lead advanced analysis of SIEM alerts, endpoint telemetry, network traffic, and threat intelligence.
• Identify patterns, anomalies, and emerging threats that require deeper investigation.
• Develop and tune detection rules, correlation logic, and alerting thresholds to reduce false positives.
• Oversee configuration, optimization, and health of SOC tools (SIEM, EDR, IDS/IPS, SOAR, firewalls).
• Help evaluate new security technologies and contribute to architecture decisions.
• Automate repetitive tasks and workflows using scripting or SOAR platforms.
• Contribute to audits, risk assessments, and security control evaluations.
• Help develop and refine security policies, standards, and playbooks.
• Participate in on‑call rotations and serve as escalation point for critical events.

Requirements

• 3+ years of hands‑on experience in a SOC or equivalent security role, with exposure to incident response and threat analysis.
• Strong understanding of the Cyber Kill Chain, MITRE ATT&CK Framework, and modern threat actor techniques.
• Experience with security event monitoring and triage, including the analysis of logs and network traffic.
• Solid knowledge of endpoint security, network security fundamentals, and operating systems.
• Ability to conduct forensic analysis and identify indicators of compromise (IOCs).
• Strong verbal and written communication skills for both technical and non‑technical audiences.
• Knowledge of compliance frameworks (e.g., NIST, ISO 27001) and their operational implications.
• Relevant certifications (e.g., GCIH, GCFA, or CompTIA CySA+).
• Proficient in security technologies such as SIEM, EDR, IDS/IPS, vulnerability management, and log analysis tools.
• Strong problem‑solving and analytical skills, with a proactive approach to threat detection and mitigation.
• Ability to work in a fast‑paced, dynamic environment, balancing multiple priorities.
• Commitment to continuous learning and staying updated on cybersecurity trends and technologies.
• Familiarity with scripting languages such as Python, PowerShell, or Bash to analyze security data, parse logs, and identify potential threats or anomalies during investigations.

Education Required:

Bachelor’s Degree or equivalent practical experience

Supervisory Responsibilities

• Oversee the work of junior SOC analysts by providing guidance, performance feedback, and technical support to
• ensure accurate analysis, effective incident response, and professional development.
• Act as a subject‑matter expert during cross‑team security discussions.
• Communicate complex security issues to leadership in clear, actionable terms.
• Lead and coordinate response activities across the SOC team, ensuring efficient escalation, proper task
• delegation, and timely resolution of critical security incidents.

Working modality

Hybrid, presence at the office is required 3 times per week

Working hours

2pm - 10pm

Salary Range Poland: 259,100 - 323,900 PLN

Global Competencies

• Fosters Teamwork
• Provides and Solicits Honest and Actionable Feedback
• Self‑Awareness
• Acts Inclusively
• Demonstrates Initiative
• Entrepreneurial Mindset
• Continuous Learning
• Embraces Change
• Results‑Oriented
• Analytical Thinking/Data Analysis
• Financial Excellence
• Communicates with Clarity

We are proud to be an equal opportunity employer. BeOne does not discriminate on the basis of race, religion, color, sex, gender identity, sexual orientation, age, disability, national origin, veteran status or any other basis covered by appropriate law. All employment is decided on the basis of qualifications, merit, and business need.