Security Operations Center Analyst (T2) in Kraków

At Jacobs, we're challenging today to reinvent tomorrow by solving the world's most critical problems for thriving cities, resilient environments, mission-critical outcomes, operational advancement, scientific discovery and cutting-edge manufacturing, turning abstract ideas into realities that transform the world for good. Your impact At Jacobs, we deliver projects that truly make a difference — from smart manufacturing and sustainable water systems to modern infrastructure and cutting-edge technologies. Our solutions support the development of cities, industries, and innovation, addressing today’s challenges both locally and globally. The

SOC Tier 2 Analyst

is an experienced member of the Security Operations Center, responsible for

advanced monitoring , investigation , and

coordination of security events . This role serves as the bridge between Tier 1 monitoring activities and higher level incident response teams, ensuring timely triage, deeper analysis, and smooth operational workflow. The Tier 2 Analyst also provides guidance to Tier 1 analysts and contributes to the continuous improvement of SOC processes and detections. Key Responsibilities:

Security Monitoring & Incident Handling

Perform all core Tier 1 monitoring duties, including:

Reviewing and responding to alerts in SIEM/SOAR queues. Monitoring SOC dashboards, EDR, and team mailboxes for security related events. Tracking team-related SNOW tickets and ensuring timely handling. Observing health dashboards, identifying anomalies, and notifying Tier 3 when needed. Ensuring consistency across security systems and reporting any discrepancies. Triaging and remediating alerts, escalating complex cases to Tier 3 or Incident Response teams (CIRT).

Advanced Analysis & Support

Conduct deeper investigation of security events escalated from Tier 1. Support Tier 1 analysts with unusual or ambiguous cases, providing guidance and technical direction. Work on improving and validating new detection rules and assisting with enhancements to existing SOC use cases.

Operational Coordination

Coordinate team schedules and ensure proper coverage within the shift. Reassign workload or tasks within the team when necessary, especially during peak activity or heavy case volumes. Prepare and distribute daily and weekly summaries highlighting notable detections, trends, and observations.

Technical Troubleshooting

Perform basic SIEM troubleshooting tasks

We offer:

The opportunity to work in an experienced team within a global company operating across all areas of infrastructure investment. A comprehensive benefits package: private medical care, additional life insurance, flexible benefits selection via the MyBenefit platform, support for employees and their families in challenging life situations, and much more. Option to work from the office or in a hybrid model. Learn more about our benefits and work culture here ! Here’s what you’ll need Willingness to work 12-hour shifts, with every other weekend off (Panama Shift Schedule) 2+ years experience in SOC or other Cyber Security related role. Proficiency with SIEM and SOAR platforms. Solid understanding of network security (firewalls, IDS/IPS), Windows/Linux internals, and authentication/authorization models (Kerberos, OAuth, SAML). Ability to perform log correlation, timeline building, and evidence triage using common tools (EDR, SIEM, sandboxing, packet capture). Working knowledge of scripting languages like Python or PowerShell for investigation, data parsing, and workflow automation. Knowledge of threat intelligence platforms and creating detections from TTPs/IOCs. Practical knowledge of compliance/regulatory environments and how they influence SOC operations. Nice to have:

Bachelor’s degree in Computer Science or Cyber Security. Knowledge of programming languages (C#, Java, etc.). GitHub/Git or other version control system experience. Knowledge of database administration and writing queries (SQL). Understanding of server administration in both Linux and Windows platforms. We believe that by being inclusive, we bring ourselves closer together and foster greater creativity. We welcome people as they are. Learn more here . Join us and build your career in an international environment, alongside people who are passionate about shaping the future. #LI-MP3 Your application experience is important to us, and we’re keen to adapt to make every interaction even better. If you require further support or reasonable adjustments with regards to the recruitment process (for example, you require the application form in a different format), please contact the team via Careers Support .

#J-18808-Ljbffr