Security Analyst - Tier 2

Role description

Role Overview

Nebius is seeking an experienced Security Analyst - Tier 2 for its Security Operations Center (SOC). This role is a hands-on position built for depth, serving as the investigative core of the SOC, focused on evidence and grounded conclusions.

What You Will Do

Investigate escalated security alerts across endpoint, identity, cloud, email, and network layers. Determine scope, impact, and root cause using EDR, SIEM, and supporting telemetry.

Why It Might Be a Fit

You are welcome to work in our offices in Tel Aviv, Israel. Intellectual honesty, clearly distinguishing important and vague data, what is known, what is assumed, and what is still unknown.

Requirements

• Around 5-7 years of hands-on security operations experience, with proven depth in alert investigation.
• Experience taking investigations to a clear verdict, including confirmed incidents.
• Strong working command of EDR platforms and SIEM-based investigation, including writing and adapting queries independently.
• Solid understanding of attacker techniques, with the ability to map findings to MITRE ATT&CK in analysis and reporting.
• Investigation capability across at least two of: endpoint, identity, cloud, email, or network domains.
• Windows and Linux internals at the depth required for log and artifact analysis: processes, authentication flows, and persistence mechanisms.
• Solid networking fundamentals: TCP/IP, DNS, HTTP/S, and the ability to interpret network telemetry.
• Scripting ability (Python or similar) for analysis at scale, and familiarity with SOAR platforms.
• Certifications such as BTL2, OSDA, or CDSA are an advantage.

Benefits

• Competitive compensation
• Career growth and learning opportunities
• Flexibility and ownership
• Collaborative and innovative culture
• Opportunity to work on impactful AI projects
• International environment and talented teams