Security Analyst- Tier 2
Hybrid (Tel Aviv)Full-timePosted 7mo ago
About the role
Experienced Security Analyst in Nebius' SOC (Tier 2) focusing on investigations, evidence-based conclusions, and escalation to Incident Response/Tier 3. Reports to the SOC Manager within Detection and Response under the CISO Office. Location: Tel Aviv, Israel.
Responsibilities
- Investigate escalated security alerts across endpoint, identity, cloud, email, and network layers.
- Determine scope, impact, and root cause using EDR, SIEM, and supporting telemetry.
- Escalate suspected incidents to the Incident Response team and complex investigations to Tier 3.
- Provide structured feedback to stakeholders on detection or prevention quality, false-positive patterns, and coverage gaps.
- Contribute to and refine SOC runbooks, triage guides, and investigation procedures.
- Review Tier 1 escalations, coach on handoff quality, and act as the analytical reference during triage.
- Document investigations to a standard that supports handoff, quality review, and lessons learned.
- Participate in the on-call rotation, acting as the investigative point of contact outside business hours.
Qualifications
- Around 5-7 years of hands-on security operations experience, with proven depth in alert investigation.
- Experience taking investigations to a clear verdict, including confirmed incidents.
- Strong working command of EDR platforms and SIEM-based investigation, including writing and adapting queries independently.
- Solid understanding of attacker techniques, with the ability to map findings to MITRE ATT&CK in analysis and reporting.
- Investigation capability across at least two of: endpoint, identity, cloud, email, or network domains.
- Windows and Linux internals at the depth required for log and artifact analysis: processes, authentication flows, and persistence mechanisms.
- Solid networking fundamentals: TCP/IP, DNS, HTTP/S, and the ability to interpret network telemetry.
- Scripting ability (Python or similar) for analysis at scale, and familiarity with SOAR platforms.
- Certifications such as BTL2, OSDA, or CDSA are an advantage.
Skills
Required:EDRSIEMMITRE ATT&CK mappingWindows forensicsLinux forensicsNetworkingScripting
Benefits
- Competitive compensation
- Career growth and learning opportunities
- Flexibility and ownership
- Collaborative and innovative culture
- Opportunity to work on impactful AI projects
- International environment and talented teams
Last updated Oct 7, 2026. Interested? Apply on the company site.
About Nebius
The ultimate cloud for AI explorers
Discover the most efficient way to build, tune and run your AI models and applications on top-notch NVIDIA® GPUs.
AI CloudToken FactoryGPUKubernetesSlurmManaged servicesTerraformAPI
More open roles at Nebius
- Staff Machine Learning Engineer, LLM Inference Optimization5d agoHybrid (Remote/Hybrid across listed locations) · ML
- Staff Site Reliability engineer - Network infrastructure - APAC5d agoRemote · Network Infrastructure
- Engineering manager - Network infrastructure - APAC5d agoRemote · Network Infrastructure
- Staff Software engineer - Network infrastructure - APAC5d agoRemote · Network Infrastructure
- Transportation Logistics Specialist5d agoHybrid (Europe) · Infrastructure