SOC Analyst – WAAP

🔥 20 hours ago

🌐 Poland, Serbia – Remote

🇵🇱 Poland – Remote 🇷🇸 Serbia – Remote

⏰ Full Time

🟡 Mid-level

🟠 Senior

🛡️ Security Operations

👻 Ghost score 10%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Gcore

WebsiteLinkedInAll Job Openings

201 - 500 employees

💼 Consulting

📦 Logistics

📣 Marketing

Consulting • Logistics • Marketing

Gcore is a global provider of cloud, edge, and AI solutions that accelerate AI training, deliver comprehensive cloud services, enhance content delivery, and protect servers and applications. With over 180 points of presence worldwide and a network capacity of 200+ Tbps, Gcore offers secure, flexible, and scalable infrastructure services. Its integrated offerings, including Edge Cloud, Edge Network, Edge Security, and AI Infrastructure, are designed to meet the needs of businesses looking to scale and control their global infrastructure efficiently. Gcore also provides robust DDoS protection and origin shielding to ensure uninterrupted online operations, making it a trusted partner for thousands of businesses worldwide.

📋 Description

• Monitor WAAP and DDoS activity across customer accounts using dashboards, alerts, and traffic patterns • Triage false positives by reviewing traffic flagged by security policies and confirming or dismissing them • Prepare weekly threat summaries per customer and post-incident DDoS reports in clear customer-facing English • Alert and escalate customer-impacting attacks to Engineering or Support with the right context • Follow the escalation runbook • Support customer onboarding by applying standard security configuration based on customer profiles and playbooks • Follow the reaction-time SLA • Contribute to and maintain runbooks for consistent, repeatable responses • Work alongside Threat Researchers, handling operational security work so they can focus on deep analysis

🎯 Requirements

• Understanding of web security fundamentals: WAF, DDoS, bots, OWASP Top 10 • Solid basics in HTTP, TCP/IP, TLS • Comfortable analyzing logs and reading dashboards; able to spot anomalies in traffic • Able to distinguish malicious from legitimate traffic and reason about false positives • Clear written English for customer-facing reports • Reliable, detail-oriented, and calm under incident pressure • Willingness to work in a shift/on-call rotation • Prior SOC L1/L2 or related experience is nice to have • Basic query/scripting: SQL-like log queries, regex, and a bit of Python is nice to have • Familiarity with CDN/WAF platforms such as Cloudflare, Akamai, Imperva, F5, or Radware is nice to have • Exposure to SIEM/alerting tooling and PagerDuty-style on-call is nice to have • Security certifications such as CompTIA Security+ are a plus, not a requirement • Deep threat research, exploit development, and malware reverse-engineering are explicitly not required

🏖️ Benefits

• Competitive compensation • Flexible working hours • Hybrid or remote work options, depending on your role • Work from anywhere in the world for up to 45 days per year • Private medical insurance for you and your family* • Extra paid vacation and sick leave days* • Support for life’s important moments and celebrations • Language courses • Modern, welcoming offices with snacks, drinks, and entertainment* • Team sports and social activities*