Security L2 Analyst
Core
Investigate and respond to advanced security incidents end-to-end, strengthen detections, and shape Cyber Defense Core processes.
Role type
L2 Security Analyst (Blue Team)
Builds
Detection logic, playbooks, and CDC processes for millions of customers worldwide
Domain
Cybersecurity / Cloud Security (AWS, Azure)
Required skills
Incident response, SIEM/EDR/NDR/IDS-IPS operations, Cloud security (AWS/Azure), Threat hunting, Purple teaming, Mentoring
Preferred skills
Networking (OSI/TCP/IP), Windows/Linux internals, Active Directory, MITRE ATT&CK, Kill Chain, Scripting (Python/PowerShell/Bash)
Technologies
Splunk, Microsoft Sentinel, Defender, CrowdStrike, Darktrace, Suricata
Responsibilities
Investigate and resolve advanced security incidents, Operate and fine-tune security tools, Propose and implement detection improvements, Participate in threat hunting and purple teaming, Mentor junior analysts
Seniority
Mid-level, hands-on IC
