{"id":2242966,"url":"https://alion.io/job/nebius-security-analyst-tier-2","title":"Security Analyst- Tier 2","company":{"id":6364,"name":"Nebius","domain":"nebius.com","url":"https://alion.io/company/nebius","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Greenhouse","truth_index":{"grade":"B","score":75,"open_postings":135,"ghost_share":0,"stale_share":1,"repost_share":0,"time_to_fill_p50_days":null,"computed_at":"2026-10-12T06:55:09Z"}},"role":"Security","role_family":"Security","seniority":"senior","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Tel Aviv, Israel"],"countries":["IL"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":114000,"max_usd":267000,"period":"year","method":"global_role_cell_scaled_by_country","sample_n":1891},"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"DNS","optional":false},{"name":"Linux","optional":false},{"name":"Python","optional":false},{"name":"SIEM","optional":false},{"name":"TCP/IP","optional":false},{"name":"Windows","optional":false}],"status":"live","first_seen_at":"2025-06-29T15:11:04Z","employer_posted_date":"2026-10-08","last_verified_at":"2026-10-12T13:38:34Z","board_verified":true,"closed_at":null,"days_open":470,"trust":{"level":"stale","repost_count":0,"flags":["stale"],"days_open":469},"description":"About Nebius:\nNebius is leading a new era in cloud infrastructure for the global AI economy. We are building a full-stack AI cloud platform that supports developers and enterprises from data and model training through to production deployment, without the cost and complexity of building large in-house AI/ML infrastructure.\nBuilt by engineers, for engineers. From large-scale GPU orchestration to inference optimization, we own the hard problems across compute, storage, networking and applied AI.\nListed on Nasdaq (NBIS) and headquartered in Amsterdam, we have a global footprint with R&D hubs across Europe, the UK, North America and Israel. Our team of 1,500+ includes hundreds of engineers with deep expertise across hardware, software and AI R&D.\nRole Overview\nNebius is seeking an experienced Security Analyst - Tier 2 for its Security Operations Center (SOC). This role is a hands-on position built for depth, serving as the investigative core of the SOC, focused on evidence and grounded conclusions. This role reports to the SOC Manager, under the Detection and Response function within the CISO Office.\nYou are welcome to work in our offices in Tel Aviv, Israel.\nKey Responsibilities\nInvestigate escalated security alerts across endpoint, identity, cloud, email, and network layers.\nDetermine scope, impact, and root cause using EDR, SIEM, and supporting telemetry.\nEscalate suspected incidents to the Incident Response team and complex investigations to Tier 3.\nProvide structured feedback to relevant stakeholders on detection or prevention quality, false-positive patterns, and coverage gaps discovered during investigations.\nContribute to and refine SOC runbooks, triage guides, and investigation procedures.\nReview Tier 1 escalations, coach on handoff quality, and act as the analytical reference during triage.\nDocument investigations to a standard that supports handoff, quality review, and lessons learned.\nParticipate in the on-call rotation, acting as the investigative point of contact outside business hours.\nRequired Qualifications:\nExperience\nAround 5-7 years of hands-on security operations experience, with proven depth in alert investigation.\nExperience taking investigations to a clear verdict, including confirmed incidents.\nTechnical Expertise\nStrong working command of EDR platforms and SIEM-based investigation, including writing and adapting queries independently.\nSolid understanding of attacker techniques, with the ability to map findings to MITRE ATT&CK in analysis and reporting.\nInvestigation capability across at least two of: endpoint, identity, cloud, email, or network domains.\nWindows and Linux internals at the depth required for log and artifact analysis: processes, authentication flows, and persistence mechanisms.\nSolid networking fundamentals: TCP/IP, DNS, HTTP/S, and the ability to interpret network telemetry.\nScripting ability (Python or similar) for analysis at scale, and familiarity with SOAR platforms.\nCertifications such as BTL2, OSDA, or CDSA are an advantage.\nLeadership & Communication\nIntellectual honesty, clearly distinguishing important and vague data, what is known, what is assumed, and what is still unknown.\nCollaborative escalation habits, hands off with context and stays available to support what comes next.\nStructured written communication, writing investigation notes that tell the story on their own.\nFluent in English, written and verbal, comfortable working with international teams and stakeholders.\nBenefits & Perks:\nCompetitive compensation\nCareer growth and learning opportunities\nFlexibility and ownership\nCollaborative and innovative culture\nOpportunity to work on impactful AI projects\nInternational environment and talented teams\nWhat's it like to work at Nebius:\nFast moving - Bold thinking - Constant growth - Meaningful impact - Trust and real ownership - Opportunity to shape the future of AI \nEqual Opportunity Statement:\nNebius is an equal opportunity employer. We are committed to fostering an inclusive and diverse workplace and to providing equal employment opportunities in all aspects of employment. We do not discriminate on the basis of race, color, religion, sex (including pregnancy), national origin, ancestry, age, disability, genetic information, marital status, veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by applicable law.\nApplicants must be authorized to work in the country in which they apply and will be required to provide proof of employment eligibility as a condition of hire. \nIf you need accommodations during the application process, please let us know.","description_format":"text","description_chars":4634,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[{"language":"English","level":"Advanced (C1)","optional":false}]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Artificial Intelligence","Commerce","Education","Data Centers & Colocation"],"lifecycle":[{"event":"open","at":"2026-10-11T01:05:42Z"}],"visa":[],"liveness":{"score":4,"band":"cold","label":"Long shot","p_open":1,"p_active":0.145,"p_room":0.28,"age_days":469,"expected_fill_days":28,"reasons":["conf:0","stale_co","win:tail","crowd:brand"],"computed_at":"2026-10-12T06:55:09Z"},"pay":null,"html_url":"https://alion.io/job/nebius-security-analyst-tier-2","json_url":"https://alion.io/job/nebius-security-analyst-tier-2.json","meta":{"generated_at":"2026-10-12T16:49:11Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":26766,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-13T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":6364},"rest":"https://alion.io/mcp/rest/get_company?id=6364"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fnebius-security-analyst-tier-2"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fnebius-security-analyst-tier-2"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fnebius-security-analyst-tier-2"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/nebius-security-analyst-tier-2\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fnebius-security-analyst-tier-2"}]}