Cybersecurity Analyst (ISMS / SIEM Incident Response)

Quick Facts

• Role: Cybersecurity Analyst supporting ISMS operations and security monitoring

• Focus: Security event/incident analysis, control verification, threat hunting, and detection optimization

Description

You will contribute to the development and operation of an Information Security Management System (ISMS) and help protect the company’s information and communication systems. The role is centered on analyzing cybersecurity events and incidents, checking implemented security measures, supporting IT and delivery teams, and developing proactive threat detection using SIEM, XDR, and EDR. You will also investigate incidents using endpoint, identity management, and cloud service data, and coordinate steps to contain impact and restore safe operations.

Responsibilities

• Analyze security risks, threats, and vulnerabilities; propose measures to improve cyber security

• Monitor, triage, analyze, document, and escalate security events and incidents using SIEM, XDR, and EDR

• Investigate incidents using data from endpoints, identity management systems, and cloud services

• Propose and coordinate actions to limit incident impact, remove threats, and securely restore operations

• Perform threat hunting, create and optimize detection rules, correlations, and playbooks

• Improve security monitoring processes and develop monitoring systems

• Collaborate with IT, development, and project teams on implementing security policies and measures

• Contribute to ISMS development and operations

• Track current trends, vulnerabilities, and evolving cyber threats, especially for critical infrastructure

Requirements

• Secondary or higher education in computer science, cybersecurity, or related field; relevant experience in information/cybersecurity

• Knowledge of the MITRE ATT&CK framework and CIA principles (confidentiality, integrity, availability)

• Experience with security monitoring tools such as SIEM, XDR, and EDR

• Orientation in cybersecurity threats, vulnerabilities, and security measures in cloud services, especially Microsoft Azure

• Ability to analyze security incidents and evaluate their potential impact

• Analytical thinking; ability to work with security documentation and communicate effectively

• Basic orientation in relevant legislation, standards, and security frameworks (e.g., NIS2, cybersecurity law, ISO/IEC 27001, NIST)

Benefits

• Remote work (Home Office) up to 3 days per week

• Flexible working hours

• Variable salary component

• 25 vacation days plus 3 health days

• Benefit program: Benefit Plus, Multisport card

• Monthly contribution to pension savings

• Meal allowance (stravenkový paušál)

Location / Start

• Place of work: Prague – Libeň, Voctářova 2449/5

• Start date: by agreement