Security Monitoring Analyst – XDR Platform

About the role

We are looking for an enthusiastic Security Monitoring Analyst to join our Threat Defense R&D team. You will help shape and protect our next‑generation XDR platform by creating detection rules, monitoring environments, and responding to incidents.

Key responsibilities

• Research and develop XDR detection rules to counter emerging threats.
• Define feature specifications for XDR components and guide developer teams.
• Monitor cloud and on‑premise environments for suspicious activity and vulnerabilities.
• Analyze security logs, alerts, and events, conduct root‑cause analysis, and recommend remediation.
• Participate in security research, stay updated on cyber‑threat intelligence, and contribute to innovation.
• Provide training on cloud security best practices and communicate complex concepts to non‑technical audiences.
• Collaborate on designing Managed Detection & Response services and other monitoring solutions.

Required profile

• Education in IT security or related field (advantageous).
• Experience as a SOC analyst or in a role focused on security monitoring outputs.
• Upper‑intermediate English (B2) and solid knowledge of Windows/Linux operating systems.

Required skills

• Experience with Sigma or Yara rule creation.
• Proficiency in Kusto, EQL, or Lucene query languages.
• Familiarity with forensic analysis and incident response.
• Penetration testing or red‑team experience.
• Hands‑on work with at least one major cloud provider (Azure, AWS, GCP).
• Knowledge of Elasticsearch, OpenSearch or Hadoop.
• Administration of Active Directory / Entra ID.
• Technical and report writing abilities.

What we offer

• Competitive base salary starting from 3000 EUR per month.
• Performance bonus up to 10 % of base salary, paid twice a year.
• Opportunities to work with state‑of‑the‑art security technologies.