← All roles

SecOps Analyst

Bright Data· Information Security
Apply on company site
Hybrid (Netanya, Israel)Full-timePosted 3mo ago

About the role

Analytical SecOps role focused on validating AI-driven investigations, owning incidents end-to-end, and operating at the frontier of AI-driven security operations in a hybrid IL, Netanya environment.

Responsibilities

  • AI Investigation Validation: Review and validate findings from our agentic AI SOC platform. Catch false positives/negatives and surface edge cases internally to improve agent accuracy.
  • End-to-End Incident Ownership: Own confirmed incidents from escalation through containment, remediation, and reporting, driving cases to closure, not just triage.
  • Application & Product Log Monitoring: Investigate anomalies across our application and product logs to detect abuse, tenant/account misuse, and threats unique to our platform.
  • Human-in-the-Loop Decision Authority: Authorize containment actions (isolating a host, suspending an identity, revoking a session) on critical alerts with confidence and speed.
  • Proactive Threat Hunting: Hunt for threats outside the current scope, including business-logic abuse, insider threats, and anomalies unique to our product.
  • Phishing & User Defense: Own confirmed phishing cases end-to-end, from detection through user communication and takedown.
  • Documentation: Maintain clear investigation runbooks and case documentation so knowledge is shared, not siloed.
  • On-Call Rotation: Serve as the decision-maker for high-severity, AI-escalated incidents during off-hours — reserved for high-confidence critical escalations, not noise.

Qualifications

  • 2+ years of hands-on experience in a SOC, Incident Response, or Threat Intelligence role.
  • Strong experience querying and analyzing logs in Splunk (must).
  • Deep understanding of common attack vectors, MITRE ATT&CK, and enterprise security tools (EDR, IdP, SASE/Firewalls).
  • Demonstrated critical thinking: comfortable questioning AI/automated conclusions rather than accepting them at face value.
  • Strong incident command instincts: fast, confident decisions under pressure with incomplete information.
  • Excellent written and verbal English communication for documentation and cross-functional incident communication.

Skills

Required:SOC/Incident ResponseSplunkMITRE ATT&CKIncident CommandCommunication
Last updated Sep 17, 2026. Interested? Apply on the company site.

About Bright Data

The web's data, unlocked

Award winning proxy networks, powerful web scrapers, and ready-to-use datasets for download. Welcome to the world's #1 web data platform.

AIAPIData InfrastructureDatasetsProxiesWeb Scrapingbrex-fastest-growing-2025
Company profileWebsite

More open roles at Bright Data