Cybersecurity Analyst

Quick Facts

• Role: Cybersecurity Analyst (supporting ISMS and cyber incident/monitoring activities)

Description

You will help analyze security events and support incident handling to protect information systems, network and cloud environments, and sensitive operational data. The role focuses on monitoring with SIEM/EDR/XDR, log analysis, identification of suspicious activity, and documenting findings and measures. You will also contribute to security monitoring development, tuning detection rules, and gradually automating incident response.

Responsibilities

• Collaborate with the cybersecurity manager and architect on ISMS development and cyber risk/security governance

• Evaluate security events and alerts from SIEM, EDR, and XDR tools

• Analyze logs, identify suspicious behavior, and perform initial incident assessment

• Support incident investigation and response, including documentation of findings and actions taken

• Manage and improve security monitoring; tune detection rules and automate parts of incident response

• Propose operational security measures and work with administrators to implement them

• Contribute to information protection and prevention of sensitive data leaks

• Monitor emerging threats, vulnerabilities, and security recommendations

• Participate in development of internal procedures, documentation, security standards, and security-function implementation

Requirements

• Master’s degree in a relevant master’s program

• Clearance eligibility for “Confidential” classified information (or willingness to apply before starting)

• Solid foundation in cybersecurity or information security

• Familiarity with identity, endpoint, network, and data protection principles

• Basic knowledge of network protocols/services (e.g., TCP/IP, DNS, HTTP/HTTPS)

• Orientation in Windows; Linux knowledge is an advantage

• Ability to read technical information and work with logs

• Analytical thinking, attention to detail, and ability to connect related factors

• Motivation to learn, proactively research, and share findings with the team

• Ability to collaborate with both technical and non-technical colleagues

Benefits

• Permanent employment

• 5 weeks of vacation

• 5 sick days/personal leave days

• Home office option

• Flexible work hours (fixed core times)

• Office location in central Prague

• Parking availability

• Childcare support (nursery group)

• Benefit card or contribution to retirement savings products; Multisport card

• Meals in an employee canteen or e-vouchers

• Doctor on site

• Gym/fitness access outside working hours

• Work with modern security technologies, SIEM tools, and security monitoring

• Practical experience protecting a complex environment of a key state institution

• Close collaboration with an internal IT team that implements security measures

• Collaboration with NÚKIB and other public-sector organizations

• Support from experienced colleagues, professional education, and room for career growth

• Involvement in digitalization and modernization of public administration