{"id":482194,"url":"https://alion.io/job/nn-group-security-l2-analyst","title":"Security L2 Analyst","company":{"id":40416,"name":"NN Group","domain":"nn-group.com","url":"https://alion.io/company/fabian-rupprecht-to-leave-nn-group","size_band":"5000+","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":{"grade":"A","score":90,"open_postings":114,"ghost_share":0,"stale_share":0.36,"repost_share":0.07,"time_to_fill_p50_days":31,"computed_at":"2026-10-20T05:45:00Z"}},"role":"Analytics","role_family":"Analytics","seniority":"junior","employment_type":"full_time","work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Prague, Czech Republic"],"countries":["CZ"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":26000,"max_usd":64000,"period":"year","method":"global_role_cell_scaled_by_country","sample_n":1679},"experience_years_min":2,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Active Directory","optional":false},{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"Bash","optional":false},{"name":"Crowdstrike","optional":false},{"name":"Darktrace","optional":false},{"name":"Linux","optional":false},{"name":"Microsoft Sentinel","optional":false},{"name":"MITRE ATT&CK","optional":false},{"name":"PowerShell","optional":false},{"name":"Python","optional":false},{"name":"SIEM","optional":false},{"name":"Splunk","optional":false},{"name":"Suricata","optional":false},{"name":"TCP/IP","optional":false},{"name":"Windows","optional":false}],"status":"live","first_seen_at":"2026-05-19T00:00:00Z","employer_posted_date":"2026-10-19","last_verified_at":"2026-10-20T21:41:18Z","board_verified":true,"closed_at":null,"days_open":154,"trust":{"level":"stale","repost_count":1,"flags":["stale"],"days_open":154},"description":"Real threats. Real ownership. Real impact.\nNot just forwarding alerts. Not just passing incidents to someone else.\nNN Digital Hub’s Cyber Defense Core team protects millions of customers worldwide. We’re looking for a Security L2 Analyst who wants to be right where cyber defense happens - investigating threats, strengthening detections, and helping shape how our CDC works.\nIf you know what it means to take ownership of an incident, dig into the root cause, and help your teammates grow along the way, you’ll fit right in.\nA note on shifts: Our services run 24/7, so continuous monitoring is part of the job. This role includes night and weekend shifts. With a large team and a reasonable approach to planning, we keep the schedule manageable and fair.\nThe day-to-day: what you’ll actually be doing\nInvestigate and respond to advanced security incidents across a global environment, owning them end to end, from the first alert to resolution.\nOperate and fine-tune security tools, including SIEM, EDR, NDR, and IDS/IPS.\nWork across AWS and Azure cloud environments.\nPropose and implement improvements to detection logic, playbooks, and CDC processes.\nTake part in threat hunting, purple teaming exercises, and other CDC security projects.\nMentor junior analysts and help improve the overall maturity of our CDC.\nYou’ll have autonomy, trust, and space to influence how we do things, not just follow existing runbooks.\nWhat makes this a good place to work\nReal cybersecurity: Meaningful incidents to investigate, not just an endless stream of alert noise.\nRoom to learn and grow: Support for certifications, training, and continuous development.\nHybrid working that works: A strong home office culture, flexible time off, and a setup where you can work from home most of the time. We meet in the office once a week.\nPeople-first team: Down-to-earth colleagues, open communication, and no unnecessary formalities. No ego, no blame. Just real support.\nThe tools you need: A company laptop and iPhone with a fully paid plan.\nBenefits that add up: Cafeteria up to 20,000 CZK, pension contributions, a MultiSport card, meal allowance, a discount on life insurance, and a contribution to home office expenses.\nReferral bonus: Up to 60,000 CZK for bringing new colleagues on board.\nOnboarding built around you: More in-person support during your probation period to help you settle in.\nWhat you’ll bring\nWe’re not looking for a unicorn. We’re looking for a solid blue team professional with:\n2-4 years of experience in SOC, Blue Team, or Incident Response.\nHands-on incident handling experience - more than copying findings into a ticket and sending them to a customer.\nAn analytical approach: Take ownership of an incident, form a hypothesis, validate it, take response actions, escalate when needed, and document your work as you go.\nExtra points if you also bring:\nA solid understanding of networking (OSI/TCP/IP), Windows and Linux internals, and Active Directory security.\nPractical experience with MITRE ATT&CK and the Kill Chain.\nDaily experience with tools such as Splunk, Microsoft Sentinel, Defender, CrowdStrike, Darktrace, Suricata, or similar.\nBasic scripting skills in Python, PowerShell, or Bash.\nA university degree or certifications are welcome, but not mandatory. Practical experience matters most.\nFrom your application to an offer\nFirst, we’ll review your CV to see how your experience matches the role. If it looks like a fit, we’ll arrange a short technical pre-screen with a couple of our senior colleagues. Next comes a longer in person interview with the team manager and Veronika from HR and then team members, where we’ll explore technical topics in more depth. If everything clicks, you’ll have a final short chat with our CDC manager. And if that goes well too, we’ll be excited to welcome you to the team!","description_format":"text","description_chars":3829,"description_truncated":false,"requirements":{"experience_years_min":2,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":["Cafeteria","Flexible time off","Home office","Hybrid work","Life insurance"],"hiring_locations":[{"name":"Czech Republic","iso":"CZ","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Penetration Testing","Property & Casualty Insurance","Hotels & Resorts","Asset Management & Funds"],"lifecycle":[{"event":"open","at":"2026-09-06T17:19:07Z"},{"event":"close","at":"2026-09-23T21:33:58Z"},{"event":"reopen","at":"2026-10-19T23:32:51Z"}],"visa":[],"liveness":{"score":5,"band":"cold","label":"Long shot","p_open":1,"p_active":0.178,"p_room":0.28,"age_days":154,"expected_fill_days":31,"reasons":["conf:1","velocity","win:tail","crowd:junior,brand"],"computed_at":"2026-10-20T05:45:00Z"},"pay":null,"html_url":"https://alion.io/job/nn-group-security-l2-analyst","json_url":"https://alion.io/job/nn-group-security-l2-analyst.json","meta":{"generated_at":"2026-10-20T23:34:57Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":27194,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-21T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":40416},"rest":"https://alion.io/mcp/rest/get_company?id=40416"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fnn-group-security-l2-analyst"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fnn-group-security-l2-analyst"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fnn-group-security-l2-analyst"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/nn-group-security-l2-analyst\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fnn-group-security-l2-analyst"}]}