Security Operations Center Analyst (T2)

Your impact

At Jacobs, we deliver projects that truly make a difference — from smart manufacturing and sustainable water systems to modern infrastructure and cutting-edge technologies. Our solutions support the development of cities, industries, and innovation, addressing today’s challenges both locally and globally.

The SOC Tier 2 Analyst is an experienced member of the Security Operations Center, responsible for advanced monitoring, investigation, and coordination of security events. This role serves as the bridge between Tier 1 monitoring activities and higher level incident response teams, ensuring timely triage, deeper analysis, and smooth operational workflow. The Tier 2 Analyst also provides guidance to Tier 1 analysts and contributes to the continuous improvement of SOC processes and detections.

Key Responsibilities

Security Monitoring & Incident Handling

Perform all core Tier 1 monitoring duties, including

• Reviewing and responding to alerts in SIEM/SOAR queues.
• Monitoring SOC dashboards, EDR, and team mailboxes for security related events.
• Tracking team-related SNOW tickets and ensuring timely handling.
• Observing health dashboards, identifying anomalies, and notifying Tier 3 when needed.
• Ensuring consistency across security systems and reporting any discrepancies.
• Triaging and remediating alerts, escalating complex cases to Tier 3 or Incident Response teams (CIRT).

Advanced Analysis & Support

• Conduct deeper investigation of security events escalated from Tier 1.
• Support Tier 1 analysts with unusual or ambiguous cases, providing guidance and technical direction.
• Work on improving and validating new detection rules and assisting with enhancements to existing SOC use cases.

Operational Coordination

• Coordinate team schedules and ensure proper coverage within the shift.
• Reassign workload or tasks within the team when necessary, especially during peak activity or heavy case volumes.
• Prepare and distribute daily and weekly summaries highlighting notable detections, trends, and observations.

Technical Troubleshooting

Perform basic SIEM troubleshooting tasks

We offer

• The opportunity to work in an experienced team within a global company operating across all areas of infrastructure investment.
• A comprehensive benefits package: private medical care, additional life insurance, flexible benefits selection via the MyBenefit platform, support for employees and their families in challenging life situations, and much more.
• Holiday allowance (“Wczasy pod gruszą”).
• Option to work from the office or in a hybrid model.
• Learn more about our benefits and work culture here!