Security Operations

• Enhance threat detection and cybersecurity operations capabilities within the Cyber Security Operations Center
• Develop, implement, validate, tune and maintain security monitoring, analytics and detection capabilities across SIEM, EDR, cloud and other cybersecurity platforms
• Operate, maintain, optimize and continuously improve security monitoring and threat detection services
• Onboard, integrate, test and validate security data sources, telemetry feeds and monitoring capabilities
• Manage security content and detection use case lifecycles, including rule reviews, testing, tuning and content quality assurance
• Collaborate with cyber threat intelligence, incident response and cybersecurity operations teams
• Participate in cybersecurity architecture reviews and provide recommendations
• Prepare and maintain cybersecurity operations metrics, dashboards, KPIs and service performance reports
• Review detection effectiveness, monitoring configurations, operational processes and service deliverables
• Analyze operational feedback to reduce false positives and improve detection quality
• Contribute to quality assurance, process reviews, control validation, service quality assessments and corrective actions
• Maintain CSOC procedures, standards, documentation, knowledge base articles and operational guidance
• Prepare and present technical reports, summaries, findings and recommendations to stakeholders
• Participate in rotating on-call coverage and resolve critical system incidents when required

Security Operations jobs in Czechia

Security Operations Analyst – SIEM Operations, Threat Detection