Microsoft 365 Security Operations Center (SOC) Analyst (Helpdesk/Support)

Quick Facts

• Role: Microsoft 365 SOC Analyst (Helpdesk/Support)

• Location/Work model: Warsaw (hybrid). At least 4 days onsite during the first 3 months; after that, at least 3 days onsite with 2 days remote.

• Working hours: 7:00–19:00 (shift-based) on weekdays. Weekend/holiday on-demand support (~once per quarter for critical projects).

Description

Join a Security Operations Center team to analyze Microsoft 365 security logs, alerts, and incidents. You will triage customer security requests, distinguish false positives from real threats, document investigations, and provide recommendations with escalation when needed.

Key responsibilities

• Analyze security logs and reports in Microsoft 365 environments

• Monitor and investigate alerts from Microsoft Defender and Microsoft Entra

• Handle security-related customer requests (ticket triage)

• Qualify events, identify incidents, and separate false positives

• Prepare customer recommendations and support risk assessment

• Escalate incidents to the appropriate internal teams

• Collaborate with 1st/2nd line support and other technical teams

• Analyze data from additional security systems (e.g., Check Point)

• Document incident handling, prepare reports, and communicate with customers

Benefits

• Stable employment and clear working conditions

• Salary aligned with experience plus discretionary bonuses for analysis effectiveness and quality

• Extra weekend/holiday work at 200% rate (~once per quarter for critical projects)

• Professional development: courses and certifications (SC-200, SC-300, AZ-500) and access to a training budget

• Opportunity to work on SOC projects and large security deployments

• Modern tools, mentoring, and expert support from Security Masters

• Friendly atmosphere and real impact on customers’ security strategies