IT Security Analyst (SOC)

About the role

RFE/RL is seeking a hands‑on IT Security Analyst to join its Security Operations Center (SOC). You will be the escalation point for security events, leading investigations and ensuring the protection of our IT infrastructure and data.

Key responsibilities

• Take technical ownership of escalated security incidents, conduct in‑depth investigations, and drive resolution in coordination with stakeholders.
• Validate alerts, assess impact, and determine root causes of security events.
• Collaborate with internal teams, incident coordination functions, and external service providers to maintain a consistent security operation.
• Document incidents, produce reports, and contribute to post‑incident analysis.
• Help develop and improve incident response playbooks, procedures, and technical standards.
• Refine detection and response processes, use cases, and day‑to‑day operational practices.
• Maintain situational awareness of the organization’s security posture and emerging threat landscape.
• Support additional security‑operations initiatives as needed.

Required profile

• 3+ years of experience in a SOC analyst role, preferably within an internal SOC.
• Hands‑on experience with security monitoring and response tools (SIEM, EDR/XDR).
• Proven ability to analyze and respond to incidents in enterprise‑scale, on‑premises, cloud, or hybrid environments.
• Strong knowledge of operating systems, authentication flows, and networking fundamentals (TCP/IP, DNS, endpoint/server behavior).
• Exposure to cloud platforms and their security logging mechanisms.
• Familiarity with scripting or automation (Python, PowerShell, or similar).
• Fluent in English; Czech is a plus.

Required skills

• SIEM
• EDR/XDR
• Python
• PowerShell
• TCP/IP
• DNS
• Cloud platforms (security logging and controls)

What we offer

• Full‑time, locally recruited position on an initial one‑year fixed‑term contract with the possibility of extension.