Role description

• Type of contract: Full-time

• Place of work: Brno, Czech Republic

We are Group IT Security 

We are IT Security division in EmbedIT, we are the ones that shape the landscape of Information Security for our partners, primarily for the Home Credit Group, selected companies in the PPF Group (CME, SKODA GROUP, CETIN and others) and for external partners as well.

Who are we looking for? 

We are looking for an SOC Analyst to join our Security Operations Center (SOC) team and help protect our customers against evolving cyber threats. You will play a key role in investigating security incidents, identifying attack patterns, improving detection capabilities, and supporting the continuous development of our SOC services.

We are ready to welcome our new colleague either in our Prague or Brno office.

Your future role

• Lead the investigation and analysis of complex security incidents, determining their scope, impact, root cause, and business risk.
• Coordinate incident response activities, driving containment, eradication, recovery, and post-incident reviews.
• Perform proactive threat hunting to identify advanced threats, attacker persistence, and suspicious activity across enterprise environments.
• Develop, tune, and optimize detection rules, analytics, and SIEM/XDR use cases to improve detection coverage and reduce false positives.
• Conduct advanced log analysis and correlate events across endpoints, networks, cloud platforms, identity providers, and security technologies.
• Create, maintain, and continuously improve incident response playbooks, detection use cases, and SOC operational procedures.
• Mentor and provide technical guidance to L1 and L2 analysts, supporting investigations, escalations, and knowledge sharing.
• Collaborate with engineering, IT, and security teams to improve security posture and drive remediation of identified risks.
• Participate in purple team activities, detection validation, and continuous improvement initiatives.
• Prepare technical reports and executive summaries, communicating findings and recommendations to both technical and management stakeholders.

Your experience and skills

• 5+ years of experience in a SOC, Incident Response, Threat Detection, or Cybersecurity role, including proven experience in an L2 SOC position.
• Extensive hands-on experience with SIEM and XDR platforms (e.g., Microsoft Sentinel, Microsoft Defender XDR, QRadar, Elastic, Splunk).
• Strong experience leading complex incident investigations throughout the entire incident lifecycle.
• Deep understanding of attacker tactics, techniques, and procedures (TTPs), the MITRE ATT&CK framework, Cyber Kill Chain, and modern threat landscapes.
• Advanced experience analyzing endpoint, identity, cloud, network, and application logs to identify malicious activity.
• Strong knowledge of attack vectors including phishing, ransomware, malware, identity attacks, lateral movement, privilege escalation, persistence, and cloud-based threats.
• Experience developing detection content, correlation rules, and threat hunting hypotheses.
• Proven ability to mentor junior analysts, lead investigations, and improve SOC processes and operational maturity.
• Excellent analytical, problem-solving, communication, and decision-making skills.
• Advanced English (written and spoken).

Nice to have

• Experience with Microsoft Azure, Microsoft 365, Defender XDR, Microsoft Sentinel, and Entra ID security.
• Experience with KQL, PowerShell, Python, or other scripting languages.
• Experience with SOAR platforms and security automation.
• Knowledge of malware analysis, digital forensics, or reverse engineering fundamentals.
• Experience with threat intelligence platforms and integrating threat intelligence into detection and response.
• Relevant security certifications such as SC-200, GCIH, GCIA, GCFA, GREM, CySA+, BTL1/BTL2, or equivalent.
• Familiarity with security frameworks and best practices (NIST CSF, NIST 800-61, CIS Controls, ISO 27001).

Join EmbedIT family and enjoy

• Motivating yearly bonus 
• 5 weeks of paid vacation 
• 5 days of Personal time off 
• Meal allowances 
• Contribution to the pension scheme or DIP - Long-Term Investment Product
• Access to premium healthcare or a monthly allowance for health activities and relaxation
• Relax room & games room 
• Possible internal growth 
• Loyalty and referral bonuses