SOC Analyst (L1–L3)

SOC Analyst (L1–L3) Quick Facts - Salary: 40,000–140,000 CZK gross per month (full-time); shift/on-call premiums added separately - Location: České Budějovice - Start date: immediately or by agreement Description Join a newly built SOC (Security Operations Center) and support cyber incident handling across SIEM, XDR, and EDR tools. Responsibilities include monitoring, triage, analysis, documentation, escalation, and incident investigation across endpoints, identities, servers, email, cloud services, and network telemetry. Depending on your level, you may also contribute to threat hunting and improve runbooks, detection rules, correlations, playbooks, and SOC operational metrics. Responsibilities - Monitor, triage, analyze, document, and escalate security events and incidents - Investigate incidents across endpoints, identities, servers, email, cloud services, and network telemetry - Propose and coordinate actions to limit incident impact, remove threats, and safely restore operations - Conduct proactive threat hunting and, by seniority, develop/improve runbooks, detection rules, correlations, playbooks, and SOC metrics - Collaborate with other SOC analysts, specialists, and technical teams Requirements - Experience and knowledge matching L1–L3 level (for junior roles: strong IT fundamentals and motivation to learn) - Orientation in Windows operating systems; for higher levels also Active Directory / Microsoft Entra ID, Linux, cloud services, and networking - Level-appropriate experience with SIEM and EDR/XDR - Analytical thinking, meticulousness, accountability, and clear documentation - Team collaboration; for senior levels, autonomy for decisions, coordination of technical steps, and mentoring - Excellent Czech and technical English; willingness to work the required shift/on-call regime (from L1 junior shifts to standard work with rotating/expert on-call for higher levels) - Criminal record clearance Benefits - Work on meaningful projects supporting protection of healthcare facilities and other organizations in the South Bohemian Region - Opportunity to work in a cyber security-focused environment building a modern SOC - Level-appropriate position, room for professional growth, expert courses, and relevant certifications - Supportive team and fair, respectful approach - Quality equipment for trouble-free performance - Salary aligned with experience, skills, and responsibility - Further education, courses, and relevant certifications - Company events - Flexible start/end times for standard work schedules - Option to work from home - 5 weeks of vacation - Sick days/health leave - Contribution to pension/life insurance - Meal vouchers/meals allowance - Mobile phone and laptop formatted_html_description:

Quick Facts

• Salary: 40,000–140,000 CZK gross per month (full-time); shift/on-call premiums added separately
• Location: České Budějovice
• Start date: immediately or by agreement

Description

Join a newly built SOC (Security Operations Center) and support cyber incident handling across SIEM, XDR, and EDR tooling. You will monitor, triage, analyze, document, and escalate security events and incidents, and investigate activity across endpoints, identities, servers, email, cloud services, and network telemetry. Depending on your level, you may also perform proactive threat hunting and improve runbooks, detection rules, correlations, playbooks, and SOC operational metrics.

Responsibilities

• Monitor, triage, analyze, document, and escalate security events and incidents
• Investigate incidents across endpoints, identities, servers, email, cloud services, and network telemetry
• Propose and coordinate steps to limit incident impact, remove threats, and safely restore operations
• Perform proactive threat hunting and, by seniority, develop or improve runbooks, detection rules, correlations, playbooks, and SOC metrics
• Collaborate with other SOC analysts, specialists, and technical teams

Requirements

• Experience and knowledge matching L1–L3 level (for junior roles: strong IT fundamentals and motivation to learn)
• Orientation in Windows operating systems; for higher levels also Active Directory / Microsoft Entra ID, Linux, cloud services, and networking
• Level-appropriate experience with SIEM and EDR/XDR tools
• Analytical thinking, meticulousness, accountability, and clear documentation of findings
• Team collaboration; for senior levels, autonomy to make decisions, coordinate technical steps, and share expertise
• Excellent Czech and technical English; willingness to work the required shift/on-call regime by level
• Criminal record clearance

Benefits

• Work on meaningful projects supporting protection of healthcare facilities and other organizations in the South Bohemian Region
• Modern SOC buildout in a cyber security-focused organization
• Level-appropriate role, room for professional growth, expert courses, and relevant certifications
• Supportive team and fair, respectful approach
• Quality equipment, salary aligned with experience and responsibility
• Further education, courses, and relevant certifications
• Company events
• Flexible start/end times for standard work schedules
• Option to work from home
• 5 weeks of vacation; sick days/health leave
• Contribution to pension/life insurance; meal vouchers/meals allowance
• Mobile phone and laptop