security analyst in SOC

Nebius builds a full-stack AI cloud platform that supports developers and enterprises from data and model training through production deployment. Its platform provides cloud infrastructure for the global AI economy.

• Investigate escalated security alerts across endpoint, identity, cloud, email, and network layers
• Determine scope, impact, and root cause using EDR, SIEM, and supporting telemetry
• Escalate suspected incidents to the Incident Response team and complex investigations to Tier 3
• Provide structured feedback to stakeholders on detection and prevention quality, false-positive patterns, and coverage gaps
• Contribute to and refine SOC runbooks, triage guides, and investigation procedures
• Review Tier 1 escalations, coach on handoff quality, and serve as an analytical reference during triage
• Document investigations to support handoffs, quality reviews, and lessons learned
• Participate in the on-call rotation and act as the investigative point of contact outside business hours

• Around 5–7 years of hands-on security operations experience, with proven depth in alert investigation
• Experience taking investigations to a clear verdict, including confirmed incidents
• Strong command of EDR platforms and SIEM-based investigations, including independently writing and adapting queries
• Solid understanding of attacker techniques and ability to map findings to MITRE ATT&CK in analysis and reporting
• Investigation capability across at least two of these domains: endpoint, identity, cloud, email, or network
• Windows and Linux internals knowledge for log and artifact analysis, including processes, authentication flows, and persistence mechanisms
• Solid networking fundamentals: TCP/IP, DNS, HTTP/S, and ability to interpret network telemetry
• Scripting ability in Python or similar for analysis at scale, and familiarity with SOAR platforms
• Intellectual honesty and ability to distinguish important and vague data, known facts, assumptions, and unknowns
• Collaborative escalation habits, providing context during handoffs and remaining available to support follow-up work
• Structured written communication and ability to write self-contained investigation notes
• Fluent English, written and verbal
• Будет плюсом: BTL2, OSDA, or CDSA certifications

• Competitive compensation
• Career growth and learning opportunities
• Flexibility and ownership
• Collaborative and innovative culture
• Opportunity to work on impactful AI projects
• International environment and talented teams
• Applicants must be authorized to work in the country in which they apply and provide proof of employment eligibility as a condition of hire