IT Security Analyst (SOC) – Mid‑Level

About the role

We are looking for a mid‑level IT Security Analyst who will help SEB detect, assess, and respond to security threats across our Baltic environment. Your primary focus will be monitoring and triaging security alerts, investigating suspicious activity, and coordinating timely follow‑up.

Key responsibilities

• Triage and investigate alerts, validate potential threats, assess impact, and prioritize follow‑up actions.
• Document investigation findings clearly and escalate confirmed or high‑risk cases according to established procedures.
• Collaborate with IT, infrastructure, application, fraud, and security teams to gather evidence and coordinate remediation.
• Improve alert quality by identifying false positives, refining detection logic, and recommending updates to monitoring use cases and playbooks.
• Track recurring threats and contribute to regular security monitoring reports, metrics, and trend analysis.
• Support incident response activities and gradually take ownership of containment, eradication, recovery, and post‑incident follow‑up.
• Stay up to date with threat intelligence, attacker techniques, security tools, and operational best practices.

Required profile

• Relevant experience in information security operations, technical support, infrastructure, or a comparable security‑focused role.
• Hands‑on experience reviewing and investigating security alerts using SIEM, EDR, cloud, network, or similar security tools.
• Good understanding of common attack techniques, indicators of compromise, log sources, authentication, networking, endpoints, and cloud environments.
• Ability to analyse incomplete information, distinguish suspicious activity from false positives, and make sound prioritisation decisions.
• Clear written and verbal communication skills, with the ability to document technical findings for different audiences.
• Collaborative and dependable approach, able to work independently within defined processes and escalate when needed.
• Motivation to develop deeper incident‑response skills and contribute to continuous improvement of security operations.
• Relevant security certifications or practical training are an advantage.
• Fluent in English.

Required skills

• SIEM platforms
• Endpoint Detection and Response (EDR) tools
• Cloud security tools
• Network security monitoring
• Threat intelligence analysis
• Incident response techniques

What we offer

• Interesting and challenging work in a highly professional international team
• Friendly and welcoming culture with hybrid way of working
• Extensive opportunities for professional development
• Attractive compensation and benefits
• Cutting‑edge projects in the banking and financial services sector