Must have

• Splunk

• SPL

• English (C1)

Nice to have

• Python

• PowerShell

• Wiz

• Netskope

• Zscaler

Requirements description

As part of our global cybersecurity team, this role focuses on identifying, analyzing, and responding to complex security incidents using advanced SecOps tools and modern threat intelligence. The position offers an opportunity to strengthen detection capabilities, enhance automation, and contribute to the continuous evolution of the financial institution's security posture.

Must-Haves:

• 3+ years of practical experience in a Security Operations Center as a cybersecurity analyst.
• Proven ability to manage the full incident lifecycle, including triage, response, threat detection, and alert optimization.
• Proficiency with Splunk Enterprise Security/Core, including building and fine-tuning complex SPL queries.
• Working knowledge of email and endpoint protection platforms, such as Proofpoint TAP/TRAP and CrowdStrike Falcon.

Nice-to-Haves:

• Scripting experience with Python or PowerShell
• Experience with Wiz, Netskope, or Zscaler
• Certifications such as CompTIA Sec+, Net+, OSCP, or CySA+

Offer description

Offer Details:

• 100% Remote work, will remain remote permanently!
• Working schedule: 07:00 - 15:00 CET (Central European Time)
• Salary: Will be based on your experience and expertise
• Technology Allowance: You will benefit from a generous budget allocated for computer, office equipment, or even a Starlink to ensure you have the tools you need to excel in your role
• Healthcare: Private health insurance provided by Enel-Med (with extended family package if needed)
• MultiSport: Access to various fitness and wellness facilities in Poland (with extended family package if needed)
• Cooperation: Long-term!

About Augmenta We are an IT consulting firm that specializes in providing digital solutions to businesses of all industries. With a team of experienced professionals and cutting-edge technology, we offer services in strategy and consulting, technology, and operations. Our goal is to help our clients stay ahead of the competition and thrive in today's digital landscape.

Your responsibilities

1. Conduct in-depth SOC analysis, triage, incident reporting, and threat hunting
2. Build security detection content within Splunk Enterprise Security to strengthen monitoring capabilities
3. Collaborate across incident management and automation platforms to contain threats, resolve alerts, and refine detection logic
4. Support continuous improvement by tuning alerts, optimizing and managing logs, and automating repetitive tasks