Security L2 Analyst

Description

The company's Cyber Defense Core team protects millions of customers worldwide and works on live threats, not just alert queues.

The role suits someone who wants to be in the middle of cyber defense: investigating threats, improving detections, and shaping how the CDC works.

The team wants people who take full ownership of an incident, dig into root causes, and help teammates grow.

Services run 24/7, so continuous monitoring is part of the job, including night and weekend shifts. A large team and careful planning keep the rota manageable and fair.

Responsibilities

• Investigate and respond to advanced security incidents across a global environment, owning each one from first alert to resolution.
• Operate and tune security tools including SIEM, EDR, NDR, and IDS/IPS.
• Work across AWS and Azure cloud environments.
• Propose and build improvements to detection logic, playbooks, and CDC processes.
• Take part in threat hunting, purple teaming exercises, and other CDC security projects.
• Mentor junior analysts and help raise the maturity of the CDC.
• Shape how the team works instead of only following existing runbooks, with autonomy and trust.

Requirements

• 2-4 years of experience in SOC, Blue Team, or Incident Response.
• Hands-on incident handling, beyond copying findings into a ticket and sending them to a customer.
• An analytical method: own an incident, form and test a hypothesis, act on it, escalate when needed, and document as you go.
• Optional: a solid grasp of networking (OSI/TCP/IP), Windows and Linux internals, and Active Directory security.
• Optional: practical experience with MITRE ATT&CK and the Kill Chain.
• Optional: daily use of tools such as Splunk, Microsoft Sentinel, Defender, CrowdStrike, Darktrace, Suricata, or similar.
• Optional: basic scripting in Python, PowerShell, or Bash.
• A university degree or certifications are welcome but not required. Practical experience counts most.

Conditions

Hybrid work: you can work from home most of the time and meet in the office once a week.

Night and weekend shifts are part of the role.

Application process: CV review, a short technical pre-screen with senior colleagues, a longer in-person interview with the team manager, HR, and team members, then a final short chat with the CDC manager.

Benefits

• Support for certifications, training, and ongoing development.
• A company laptop and iPhone with a fully paid plan.
• Cafeteria allowance up to 20,000 CZK, pension contributions, a MultiSport card, meal allowance, a discount on life insurance, and a contribution to home office costs.
• Referral bonus up to 60,000 CZK for bringing in new colleagues.
• Extra in-person onboarding support during probation.
• Flexible time off and a strong home office culture.