Security Operations Center (SOC) Analyst

Location: Kraków, Poland; remote or hybrid work setup

Company

hirify.global operates a Cybersecurity organization supporting security operations across a global environment in the financial services sector.

What you will do

• Monitor and triage endpoint, identity, cloud, network, email, and application security alerts.
• Correlate logs and evidence across security tools to assess scope, severity, and impact.
• Investigate routine security events and escalate significant or ambiguous activity with clear findings.
• Maintain case notes, investigation timelines, evidence, and incident records.
• Execute approved playbooks and support containment, remediation, recovery, and post-incident reviews.
• Improve runbooks, detections, knowledge articles, automation, and analyst workflows using scripting and approved AI-assisted tools.

Requirements

• Bachelor’s degree in cybersecurity, computer science, information systems, information technology, engineering, or a related field, or equivalent practical experience.
• One to three years of relevant experience in a SOC, incident response, information security, NOC, systems administration, infrastructure, cloud operations, or Tier 2+ technical support role.
• Experience with security monitoring, log analysis, alert triage, or a SIEM platform.
• Working knowledge of Microsoft 365, Microsoft Entra ID, Active Directory, Windows, basic Linux administration, DNS, TCP/IP, VPNs, and firewalls.
• Understanding of phishing, credential theft, malware, privilege escalation, lateral movement, and account compromise, plus familiarity with MITRE ATT&CK.
• Basic PowerShell, Python, or comparable scripting skills, with strong analytical, troubleshooting, documentation, organizational, and communication abilities.

Nice to have

• Experience in financial services or another regulated industry.
• Hands-on experience with Microsoft Sentinel, Microsoft Defender XDR, CrowdStrike, Splunk, Proofpoint, SailPoint, Palo Alto Networks, Rapid7, or ServiceNow Security Operations.
• Experience using approved large language model or AI-assisted tools for investigation, analysis, documentation, or automation.
• CompTIA Security+ or Microsoft SC-900 certification; CySA+, SSCP, GIAC GSEC, or GCIH are also valued.

Culture & Benefits

• Visa sponsorship and relocation support to Poland, including visa application assistance, entry permits, and residence permits.
• Flight tickets and first-month accommodation support for relocated employees and their official families.
• Health insurance, including 50% coverage for spouses and children.
• 24 days of paid vacation and 10 days of paid sick leave.
• 50% reimbursement for professional training, education, and conferences.
• Professional team environment with teambuilding events and activities.