Security Monitoring Analyst – XDR Detection Engineer

About the role

We are looking for an enthusiastic Security Monitoring Analyst to join our Threat Defense R&D team. You will help shape our XDR platform by creating detection rules, monitoring environments, and responding to incidents.

Key responsibilities

• Research and develop XDR detection rules to counter emerging threats.
• Define XDR feature specifications and guide development teams.
• Monitor cloud and on‑premise environments for suspicious activity.
• Analyze security logs, alerts, and events, and conduct root‑cause analysis.
• Participate in security research, stay updated on threat intelligence, and contribute to Managed Detection & Response services.
• Provide training on cloud security best practices and communicate complex concepts to non‑technical audiences.

Required profile

• Education in IT security (advantageous).
• Experience in security research, detection engineering, or SOC analysis.
• Familiarity with Sigma, Yara, Kusto, EQL, or Lucene query languages.
• Hands‑on experience with forensic analysis, incident response, penetration testing or red teaming.
• Knowledge of major cloud platforms (Azure, AWS, GCP) and big‑data technologies (Elasticsearch, OpenSearch, Hadoop).
• Understanding of Active Directory/Entra ID, Windows and Linux operating systems.
• Upper‑intermediate English (B2) and solid technical writing skills.

Required skills

• XDR detection rule development
• Sigma and Yara rule creation
• Kusto, EQL, Lucene query languages
• Forensic analysis
• Incident response
• Penetration testing / red teaming
• Azure, AWS, GCP
• Elasticsearch, OpenSearch, Hadoop
• Active Directory and Entra ID
• Windows and Linux administration

What we offer

• Competitive base salary starting from 3000 EUR per month.
• Performance bonus up to 10 % of base salary, paid twice a year.
• Opportunities to work with state‑of‑the‑art security technologies.
• Professional development and training in cloud security.