security analyst in SOC

Nebius; Town of Russia (NY); Presencial; USD 120.000 - 180.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Competitive compensation

Career growth

Flexible ownership

Collaborative culture

Impactful AI projects

International environment

Descripción de la vacante

Nebius ищет специалиста по кибербезопасности для работы в США, Нью-Йорк. Вакансия предполагает расследование эскалированных инцидентов, работу с EDR и SIEM, а также развитие процессов и документации.

Требуется 5–7 лет опыта, владение Windows/Linux, знание MITRE ATT&CK и умение писать запросы. Гибкая, международная среда и возможность работать на передовых проектах в области ИИ.

Formación

• 5–7 лет опыта в Security Operations и расследовании инцидентов.
• Умение доводить расследование до четкого вердикта и подтвержденных инцидентов.
• Глубокие знания EDR и SIEM; умение писать и адаптировать запросы.
• Опыт анализа Windows и Linux логов, артефактов и сетевой телеметрии.
• Знание MITRE ATT&CK и отображение результатов анализа.

Responsabilidades

• Расследование эскалированных security-алертов по endpoint, identity, cloud, email и сети.
• Определение объема, воздействия и корневой причины с использованием EDR, SIEM и сопутствующей телеметрии.
• Эскалация инцидентов в Incident Response и Tier 3.
• Предоставление структурированного фидбэка заинтересованным сторонам по качеству обнаружения и покрытию.

Conocimientos

Alert investigation

MITRE ATT&CK mapping

Python scripting

Two-domain investigation

Network fundamentals

Herramientas

EDR platforms

SIEM

SOAR platforms

Descripción del empleo

Описание: Nebius builds a full-stack AI cloud platform that supports developers and enterprises from data and model training through production deployment. Its platform provides cloud infrastructure for the global AI economy.

Задачи

• Investigate escalated security alerts across endpoint, identity, cloud, email, and network layers
• Determine scope, impact, and root cause using EDR, SIEM, and supporting telemetry
• Escalate suspected incidents to the Incident Response team and complex investigations to Tier 3
• Provide structured feedback to stakeholders on detection and prevention quality, false-positive patterns, and coverage gaps
• Contribute to and refine SOC runbooks, triage guides, and investigation procedures
• Review Tier 1 escalations, coach on handoff quality, and serve as an analytical reference during triage
• Document investigations to support handoffs, quality reviews, and lessons learned
• Participate in the on-call rotation and act as the investigative point of contact outside business hours

Требования

• Around 5–7 years of hands‑on security operations experience, with proven depth in alert investigation
• Experience taking investigations to a clear verdict, including confirmed incidents
• Strong command of EDR platforms and SIEM-based investigations, including independently writing and adapting queries
• Solid understanding of attacker techniques and ability to map findings to MITRE ATT&CK in analysis and reporting
• Investigation capability across at least two of these domains: endpoint, identity, cloud, email, or network
• Windows and Linux internals knowledge for log and artifact analysis, including processes, authentication flows, and persistence mechanisms
• Solid networking fundamentals: TCP/IP, DNS, HTTP/S, and ability to interpret network telemetry
• Scripting ability in Python or similar for analysis at scale, and familiarity with SOAR platforms
• Intellectual honesty and ability to distinguish important and vague data, known facts, assumptions, and unknowns
• Collaborative escalation habits, providing context during handoffs and remaining available to support follow‑up work
• Structured written communication and ability to write self‑contained investigation notes
• Fluent English, written and verbal
• Будет плюсом: BTL2, OSDA, or CDSA certifications

Условия

• Competitive compensation
• Career growth and learning opportunities
• Flexibility and ownership
• Collaborative and innovative culture
• Opportunity to work on impactful AI projects
• International environment and talented teams
• Applicants must be authorized to work in the country in which they apply and provide proof of employment eligibility as a condition of hire