Cybersecurity Analyst (Wazuh/Elasticsearch)

Location: Kaunas, Lithuania; hybrid workplace

Gross salary: €2,800–€4,700 per month, with flexibility based on skills and competencies.

Company

Source is an ecosystem of independent technology companies providing shared standards and support for responsible access to web data.

What you will do

• Monitor, triage, and investigate SIEM and security-tool alerts, distinguishing true positives from noise.
• Execute incident response activities including containment, evidence collection, root cause analysis, and remediation follow-up.
• Build, tune, and maintain Wazuh and Elasticsearch detection rules and decoders for different attack scenarios.
• Onboard and normalize log sources to expand security visibility.
• Improve SOC operations by identifying gaps in detection logic, playbooks, and triage workflows.
• Assess and validate external penetration-testing and bug-bounty reports.

Requirements

• 2–4 years of experience in security operations, incident response, or application security.
• Experience with SIEM platforms such as Wazuh, Elastic/ELK, Splunk, or similar, including query and detection-rule development.
• Scripting skills in Python, Bash, or a similar language for automation, log parsing, and testing tools.
• Strong understanding of web technologies and attack methods, including HTTP/S, session management, OAuth 2.0, OIDC, JWT, REST, GraphQL, SOP, CORS, and CSP.
• Knowledge and practical experience with OWASP Top 10 exploitation.

Nice to have

• Certifications such as OSCP, OSWE, BSCP, eWPT/eWPTX, GWAPT, GCIH, or CySA+.
• Experience with WAFs, bot management, or anti-abuse systems such as Cloudflare, Akamai, or AWS WAF.
• Experience with AWS, GCP, or Azure and containerized applications using Docker or Kubernetes.
• Familiarity with Elastic Fleet/Agent and Wazuh rule and decoder development.

Culture & Benefits

• Cross-company collaboration, knowledge sharing, and a high bar for technical quality.
• 40+ internal learning options, external conferences, mentorship, and year-round knowledge sharing.
• Private health insurance, psychotherapy, on-site well-being consultants, 24/7 gym access, and a wellness app.
• Team events, an overseas workation, quarterly team-building budgets, bonus vacation days, and paid life-moment days off.
• Barista coffee and the tools needed for the role.