{"id":4080286,"url":"https://alion.io/job/neverhack-estonia-security-analyst-part-time","title":"Security Analyst (part-time)","company":{"id":2296992,"name":"NEVERHACK Estonia","domain":"neverhack.ee","url":"https://alion.io/company/neverhack-ee","size_band":"51-200","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"BambooHR","truth_index":null},"role":"Security","role_family":"Security","seniority":null,"employment_type":"part_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Tallinn, Estonia"],"countries":["EE"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":null,"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Bash","optional":false},{"name":"DNS","optional":false},{"name":"Git","optional":false},{"name":"Linux","optional":false},{"name":"Nginx","optional":false},{"name":"PagerDuty","optional":false},{"name":"Python","optional":false},{"name":"Rest API","optional":false},{"name":"TCP/IP","optional":false},{"name":"WebSockets","optional":false},{"name":"AWS","optional":true},{"name":"Grafana","optional":true},{"name":"Loki","optional":true},{"name":"Prometheus","optional":true}],"status":"live","first_seen_at":"2026-11-11T16:59:42Z","employer_posted_date":"2026-11-11","last_verified_at":"2026-11-12T04:42:36Z","board_verified":true,"closed_at":null,"days_open":0,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":0},"description":"About the role\nWe are looking for a Security Analystto join our Security Operations Center (SOC) team in Estonia.\nThis is a hands-on technical role focused on investigating and resolving urgent customer-reported issues and security incidents affecting web applications and APIs.\nYou will troubleshoot issues involving Web Application Firewalls (WAF), HTTP traffic, Linux systems, networking, and cloud infrastructure. When necessary, you will adjust security configurations, resolve application connectivity issues, and coordinate escalations with other teams.\nThis is a weekend-based, pager-driven on-call position.Security Analysts cover approximately two weekends per month, from Saturday morning to Monday morning. During assigned weekends, you will be available to respond to urgent customer tickets and incident notifications through PagerDuty. Continuous active monitoring is not required; work is performed when urgent issues arise.\nJob responsibilities\nRespond to urgent customer support tickets and incident notifications through Zendesk and PagerDuty.\nInvestigate and resolve technical and security-related incidents affecting protected web applications and APIs.\nAnalyze application logs, HTTP traffic, and monitoring data to identify root causes.\nTroubleshoot issues involving WAF behavior, application connectivity, Linux, networking, Nginx, and cloud infrastructure.\nInvestigate WAF false positives and adjust security rules or customer-specific configurations when necessary.\nUse internal tools, REST APIs, and Git-based workflows to investigate issues and apply fixes.\nCommunicate findings and resolutions clearly to customers and internal teams.\nEscalate complex incidents to engineering or other teams when required.\nDocument incidents, troubleshooting steps, and resolutions.\nWhat makes you a good fit\nPractical experience with Linux systems and command-line (CLI) troubleshooting.\nGood understanding of TCP/IP, HTTP/HTTPS, HTTP headers, DNS, TLS, reverse proxies, and WebSocket.\nFamiliarity with web application security, common web attacks, and Web Application Firewalls (WAFs).\nAbility to analyze logs, HTTP traffic, and application behavior to identify technical issues and root causes.\nFamiliarity with Nginx, JSON/YAML configurations, REST APIs, and Git.\nBasic Python and/or Bash scripting skills.\nStrong analytical and troubleshooting skills, with a methodical approach to problem-solving.\nGood written and spoken English, with the ability to communicate clearly with customers and internal teams.\nAbility to work independently, prioritize urgent incidents, and recognize when escalation is necessary.\nNice to have\nPrevious experience in SOC, technical support, incident response, or cloud operations.\nExperience with AWS or other cloud infrastructure.\nFamiliarity with Zendesk, PagerDuty, Grafana, Loki, or Prometheus.\nExperience troubleshooting WAF rules, Nginx configurations, and TLS certificates.\nA degree in cybersecurity, computer science, IT, or a related field.\nRelevant certifications such as Security+, GISF, SSCP, Network+, or CCNA.\nWhat we value\nWe are looking for someone who:\nEnjoys investigating technical problems and identifying root causes.\nTakes ownership of incidents and follows them through to resolution or escalation.\nCan remain methodical and focused when handling urgent issues.\nIs comfortable working independently and communicating directly with customers.\nMakes careful changes to production configurations and understands their potential impact.\nIs reliable, detail-oriented, and willing to learn unfamiliar technologies.\nWhy join us?\nWork on real-world technical and security incidents involving production web applications and APIs.\nGain hands-on experience with a production WAF and API security platform.\nDevelop expertise in Linux, networking, Nginx, cloud infrastructure, and security troubleshooting.\nCollaborate with experienced security analysts and engineering teams.\nBenefit from a predictable weekend on-call rotation of approximately two weekends per month.","description_format":"text","description_chars":4028,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[{"language":"English","level":"All levels","optional":false}]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Penetration Testing","Information Security","Security Operations"],"lifecycle":[{"event":"open","at":"2026-11-11T16:59:42Z"}],"visa":[],"liveness":{"score":86,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.86,"p_room":1,"age_days":0,"expected_fill_days":27,"reasons":["conf:2","win:early"],"computed_at":"2026-11-12T07:15:13Z"},"pay":null,"html_url":"https://alion.io/job/neverhack-estonia-security-analyst-part-time","json_url":"https://alion.io/job/neverhack-estonia-security-analyst-part-time.json","meta":{"generated_at":"2026-11-12T07:15:13Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":14469,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-13T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.1,"usd":0.01,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":2296992},"rest":"https://alion.io/mcp/rest/get_company?id=2296992"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fneverhack-estonia-security-analyst-part-time"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":2,"usd":0.2},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fneverhack-estonia-security-analyst-part-time"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.1,"usd":0.01},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fneverhack-estonia-security-analyst-part-time"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/neverhack-estonia-security-analyst-part-time\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fneverhack-estonia-security-analyst-part-time"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":4080286}},{"tool":"search_jobs","arguments":{"company":"neverhack.ee","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":4080286},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}