SOC Analyst – Security Operations Team

Job not on LinkedIn

3 days ago

Apply Now

Receive Emails with Similar Jobs

Semrush

WebsiteLinkedInAll Job Openings

B2B • SaaS • Marketing

Semrush is a comprehensive online marketing platform that offers tools for SEO, content marketing, competitor analysis, PPC, and social media management. With features such as keyword research, site audit, market research, and advertising solutions, Semrush is an all-in-one suite designed for businesses to enhance their online visibility and grow their digital footprint. It also provides insights into competitors' strategies, content optimization recommendations, and PPC campaign management. Semrush's tools are trusted by world-leading brands and marketing professionals globally.

1001 - 5000 employees

Founded 2008

🤝 B2B

☁️ SaaS

💰 Venture Round on 2018-04

📋 Description

• Incident Response. Responding to security incidents, investigating and analyzing them, coordinating with other teams, such as IT, network operations, and management, to ensure a timely and effective response to security incidents • Bug Bounty. Validating the reported vulnerabilities, organizing them according to their severity, managing the mitigation processes, and maintaining communication with those who reported these vulnerabilities. • Alerts and Playbooks Development. Developing and refining SIEM correlation rules, designing and maintaining playbooks, configuring any necessary exceptions, and documenting all changes and implementations for future reference. • Threat Analysis & Hunting. Conducting research on emerging threats, vulnerabilities, and security technologies, preparing analytical researches and potential risks assessments. • Vulnerability Management. Work with vulnerability analytics to identify potential vulnerabilities, analyze their impact, and prioritize actions.

🎯 Requirements

• Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, or a related field. • Minimum 1 year of experience as an L1/L2 SOC Analyst or in a similar role focused on security operations or incident response. • Strong understanding of core security principles, attacker tactics and techniques, and detection methods (OWASP Top 10, CVE, MITRE ATT&CK). • Knowledge of web application security fundamentals (e.g., cookie security flags, Same-Origin Policy, XHR, CORS). • Basic understanding of common web attacks (XSS, CSRF, SQL Injection) and ability to recognize related patterns in logs or payloads. • Experience in incident response and investigation using playbooks, with the ability to communicate effectively across teams. • Strong analytical and research skills — ability to work with complex and incomplete data from multiple sources. • Familiarity with modern development workflows and tools such as Git, Ansible, or Docker. • Hands-on experience with SIEM platforms (preferably Splunk), including log collection, correlation rule development, and alert tuning. • Excellent communication skills and the ability to clearly explain security concepts to both technical and non-technical audiences. • Self-motivated, proactive, and capable of working independently while managing priorities effectively. • Continuous learner - staying up to date with new vulnerabilities, threats, and security tools.

🏖️ Benefits

• Unlimited PTO • Flexible working hours • Inter Polska Health Insurance and Life Insurance co-financing • Worksmile Cafeteria Program (available after 2 months of employment), including co-financing for the Multisport card • Mental health support–private therapy sessions (in Polish and English) • B2B contract is also an option • Employee Referral Program • Buddy Program • Corporate events • Teambuilding • Training, courses, conferences