SOC Tier 1 Security Analyst — 24/7 Shifts, Wrocław

SmartRecruiters, Inc.; Wrocław; On-site; PLN 110,000 - 180,000; Full time

Benefits offered by this job

Staff travel benefits

Multisport card

Job summary

Ryanair Labs is hiring an Information Security Analyst SOC Tier 1 in Wrocław to join Europe’s Largest Airline Group. You will analyze, triage and respond to security events on the SIEM, monitor alarms and collaborate on improving security posture.

This role requires 12-hour shifts on a 24/7 team and offers a permanent contract after a trial period. Responsibilities include writing and tuning SIEM rules, log analysis, threat research, and supporting compliance and reporting.

Qualifications

• Experience analysing and interpreting SOC data with incident handling.
• Familiarity with IT security monitoring, cyber threat analysis and vulnerability analysis.
• Knowledge of multiple OS and system administration (Windows, Linux, Mac, VM platforms).
• Experience with security tools: vulnerability scanners, IDS/IPS, SIEM, etc.

Responsibilities

• Analyze, triage and respond to security events on the SIEM platform.
• Monitor alarms, assess event data and determine incident severity and escalation.
• Tune SIEM rules to reduce false positives and improve alerts.
• Analyze logs from various sources and support threat intelligence efforts.
• Participate in vulnerability assessments and remediation planning.
• Document security operations procedures and incident case data.

Skills

SOC analysis

SIEM monitoring

Networking basics

TCP/IP knowledge

Firewall configuration

Threat analysis

Threat hunting

ELK stack

Education

Information/Cybersecurity degree

Tools

Vulnerability scanners

IDS/IPS

SIEM

tcpdump

Wireshark

Job description

Ryanair Labs is hiring an Information Security Analyst SOC Tier 1 in Wrocław to join Europe’s Largest Airline Group. You will analyze, triage and respond to security events on the SIEM, monitor alarms and collaborate on improving security posture.

This role requires 12-hour shifts on a 24/7 team and offers a permanent contract after a trial period. Responsibilities include writing and tuning SIEM rules, log analysis, threat research, and supporting compliance and reporting.