Medior Security Operations Center Engineer L2

About the Position

Medior Security Operations Center Engineer L2

We are seeking a Medior Security Operations Center Engineer L2 to join our team for monitoring and responding to corporate cybersecurity incidents in a B2B model.

What You Will Do

• Monitor and analyze security events in real-time (SIEM, EDR, IDS/IPS, log files);
• Perform primary and secondary analysis (L1/L2) and classification (triage) of information security incidents;
• Register, track, and escalate incidents in the ticketing system;
• Investigate incidents and analyze root causes (root cause analysis - RCA);
• Coordinate incident response and interact with the client's technical teams;
• Create, test, and update correlation rules and response playbooks;
• Maintain technical documentation and prepare reports based on incident analysis;
• Participate in threat localization and mitigation activities.

Requirements

• English proficiency: Upper Intermediate/Advanced (for daily communication and report writing);
• Experience in SOC or cybersecurity for 1.5–2 years;
• Understanding of network protocols (TCP/IP, DNS, HTTP/HTTPS, etc.) and OSI/TCP-IP models;
• Experience with SIEM systems (e.g., Splunk, Microsoft Sentinel, Elastic, QRadar) and EDR/XDR solutions;
• Understanding of the MITRE ATT&CK matrix and main cyberattack vectors;
• Ability to analyze system logs (Windows, Linux) and network device log files;
• Psychological resilience, attention to detail, and analytical thinking;
• Willingness to work on a rotating schedule (8-hour shifts in Kyiv time): from 08:00 to 16:00, from 16:00 to 24:00, from 00:00 to 08:00.

Nice to Have

• Experience in Windows/Linux administration and network equipment configuration;
• Relevant certifications (e.g., CompTIA Security+/CySA+, CEH, Blue Team Level 1, etc.);
• Skills in automating routine tasks using scripts (Python, PowerShell, Bash);
• Experience with cloud platforms (AWS, Azure, GCP);
• Knowledge of query languages for log search (KQL, SPL, etc.).

What We Offer

• Participation in large-scale cybersecurity projects;
• Career growth opportunities within the team – the possibility to grow to Senior SOC Analyst, Security Engineer, or DevSecOps specialist with us;
• A professional, friendly, and supportive environment;
• The ability to choose between a modern office space and a remote format with guaranteed stable connectivity;
• A flexible compensation review system;
• Medical, legal, and accounting support programs.

If you enjoy working with cybersecurity challenges and solving complex problems promptly, get in touch with us and test your skills.

---

Other Opportunities

• Junior Tech Support Engineer
• Junior Security Operations Center Engineer L1
• Medior Security Operations Center Engineer L2
• General QA Engineer
• Manual QA Engineer
• Automation QA Engineer
• Middle QA Automation Engineer (C# / .NET)
• Middle Ruby/RoR developer
• Middle Golang Developer
• Junior Java Developer
• Middle Java Engineer
• Middle Business Analyst
• Medior Salesforce Developer
• Middle Business Data Analyst / BI engineer
• Junior Business Data Analyst / BI engineer
• Middle Data Engineer
• Senior Data Engineer
• Middle Azure Cloud Engineer
• Middle DevOps Engineer
• Junior DevOps Engineer
• Senior Full Stack .NET Developer
• Middle Full Stack.Net Developer
• Full Stack JS Developer
• Middle FullStack (Python) Developer
• Головний бухгалтер
• Trainee Automation QA Engineer
• Middle Flutter Developer
• Middle iOS Developer
• Business Development Manager
• Middle IT Project Manager
• Middle Data Scientist
• Senior Data Scientist
• Junior Site Reliability Engineer (SRE)
• Senior DevOps Engineer

Stay updated with new vacancies, current training programs, and the latest news from the NIX team on our Facebook page. Subscribe and always stay connected with NIX!