Назад
Company hidden
33 минуты назад

Cybersecurity Analyst (B2B)

17 200 - 23 000PLN
Формат работы
remote (только Poland)
Тип работы
fulltime
Грейд
middle
Английский
b2
Страна
Poland
Вакансия из списка Hirify.GlobalВакансия из Hirify Global, списка международных tech-компаний
Для мэтча и отклика нужен Plus

Мэтч & Сопровод

Для мэтча с этой вакансией нужен Plus

Описание вакансии

Текст:
/
TL;DR
Cybersecurity Analyst (B2B) (Wazuh/Elasticsearch): Monitoring and investigating security alerts, leading incident response, and expanding detection coverage for a web data ecosystem with an accent on SIEM operations, web application security, and automated detection. Focus on tuning detection rules and decoders, normalizing log sources, analyzing attack techniques, and improving SOC response workflows.

Location: Remote, Warsaw

Gross salary: 17,200–23,000 PLN/month, with flexibility based on skills and competencies.

Company

Source is an ecosystem of independent technology companies providing shared standards and support for responsible access to web data.

What you will do

  • Monitor, triage, and investigate SIEM and security-tool alerts, distinguishing true positives from noise.
  • Execute incident response, including containment, evidence collection, root-cause analysis, and remediation follow-up.
  • Build, tune, and maintain Wazuh and Elasticsearch detection rules and decoders.
  • Onboard and normalize log sources to expand security visibility.
  • Improve SOC operations by identifying gaps in detection logic, playbooks, and triage workflows.
  • Assess and validate external penetration-test and bug-bounty reports.

Requirements

  • 2–4 years of experience in security operations, incident response, or application security.
  • Experience with SIEM platforms such as Wazuh, Elastic/ELK, Splunk, or similar, including query and detection-rule development.
  • Scripting skills in Python, Bash, or similar for automation, log parsing, and testing tools.
  • Strong understanding of web technologies and attack methods, including HTTP/S, session management, OAuth 2.0, OIDC, JWT, REST and GraphQL APIs, SOP, CORS, and CSP.
  • Knowledge and practical experience with OWASP Top 10 exploitation.

Nice to have

  • Security certifications such as OSCP, OSWE, BSCP, eWPT/eWPTX, GWAPT, GCIH, or CySA+.
  • Experience with WAFs, bot management, or anti-abuse systems such as Cloudflare, Akamai, or AWS WAF.
  • Experience with AWS, GCP, or Azure and containerized applications using Docker or Kubernetes.
  • Familiarity with Elastic Fleet/Agent and Wazuh rule and decoder development.

Culture & Benefits

  • Cross-company collaboration, knowledge sharing, and a high standard for technical work.
  • 40+ internal learning options, external conferences, mentorship, and year-round knowledge sharing.
  • Team events and an overseas workation.
  • Bonus vacation days, paid life-moment days off, and required work tools.

Будьте осторожны

Если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого. Это мошенники. Обязательно жмите «Пожаловаться» или пишите в поддержку. Подробнее в гайде →