Security Analyst - Tier 2

Location: Amsterdam, Netherlands; the role also welcomes candidates to work from the Tel Aviv, Israel office.

Company

Nebius is building a full-stack AI cloud platform for data and model training through production deployment, including large-scale GPU orchestration, inference optimization, compute, storage, networking, and applied AI.

What you will do

• Investigate escalated security alerts across endpoint, identity, cloud, email, and network layers.
• Determine investigation scope, impact, and root cause using EDR, SIEM, and supporting telemetry.
• Escalate suspected incidents to Incident Response and complex investigations to Tier 3.
• Provide feedback on detection and prevention quality, false-positive patterns, and coverage gaps.
• Refine SOC runbooks, triage guides, investigation procedures, and documentation.
• Review Tier 1 escalations, coach handoff quality, and participate in the on-call rotation.

Requirements

• Approximately 5–7 years of hands-on security operations experience with proven depth in alert investigation.
• Experience taking investigations to a clear verdict, including confirmed incidents.
• Strong command of EDR platforms and SIEM-based investigation, including independently writing and adapting queries.
• Understanding of attacker techniques and ability to map findings to MITRE ATT&CK in analysis and reporting.
• Investigation capability across at least two of the following domains: endpoint, identity, cloud, email, or network.
• Windows and Linux internals sufficient for log and artifact analysis, including processes, authentication flows, and persistence mechanisms.
• Networking fundamentals covering TCP/IP, DNS, HTTP/S, and network telemetry interpretation.
• Scripting ability in Python or a similar language for analysis at scale, plus familiarity with SOAR platforms.
• Structured written communication and collaborative escalation habits, including clear investigation notes and contextual handoffs.
• Fluent written and verbal English is required for work with international teams and stakeholders.

Nice to have

• Certifications such as BTL2, OSDA, or CDSA.

Culture & Benefits

• Competitive compensation and career growth and learning opportunities.
• Flexibility, ownership, and an environment focused on meaningful impact.
• Collaborative, innovative, and international workplace with talented teams.
• Opportunity to work on impactful AI projects and help shape the future of AI.
• Applicants must be authorized to work in the country in which they apply and provide proof of employment eligibility.