Junior SOC Security Engineer

As a Junior SOC Security Engineer, you will support the operational activities of the security team by monitoring IT infrastructure, analyzing and triaging alerts generated by SIEM and EDR systems, and escalating incidents in accordance with established procedures. Your responsibilities will also include analyzing malware payloads, identifying Indicators of Compromise (IoCs), and performing behavioral analysis of users and systems to detect anomalies and unauthorized activity.

You will actively support the team in AI-driven threat hunting by participating in proactive threat hunting using AI-based tools, interpreting hypotheses and anomalies generated by AI models, and documenting findings while recommending new detection rules.

Responsibilities

• Respond to incidents in accordance with established procedures.
• Verify alerts from SIEM/EDR/XDR-class systems.
• Support more experienced team members in developing current tools or implementing new security solutions.
• Escalate complex cases and support the SOC team in daily operations.

Desired Experience

• Experience in an L1 SOC environment (minimum 1 year).
• English and Polish fluency (minimum B2).
• Threat analysis and incident response skills.
• Knowledge of SIEM tools, including Splunk Enterprise Security.
• Knowledge of XDR/EDR solutions, including SentinelOne.
• Knowledge of network protocols, such as TCP/IP, HTTPS, and DNS.
• Willingness to develop automation and scripting skills; Python and Bash are nice to have.
• Knowledge of frameworks such as MITRE ATT&CK and NIST.

We Offer

• Access to cutting-edge technologies on large-scale, dynamic projects.
• Extremely flexible working conditions, including fully remote work.
• Practical, purpose-driven work directly connected to business results.
• Flexible cooperation model: B2B or Contract of Mandate.