IT Security Analyst (SOC)

About the role

SEB is seeking a mid‑level IT Security Analyst to detect, assess, and respond to security threats across its Baltic environment. The primary focus will be monitoring and triaging security alerts, investigating suspicious activity, and coordinating timely follow‑up actions.

Key responsibilities

• Triage and investigate alerts, validate potential threats, assess impact, and prioritize follow‑up actions.
• Document investigation findings clearly and escalate confirmed or high‑risk cases according to established procedures.
• Collaborate with IT, infrastructure, application, fraud, and security teams to gather evidence and coordinate remediation.
• Improve alert quality by identifying false positives, refining detection logic, and recommending updates to monitoring use cases and playbooks.
• Track recurring threats and contribute to regular security monitoring reports, metrics, and trend analysis.
• Support incident response activities and gradually take ownership of containment, eradication, recovery, and post‑incident follow‑up.

Required profile

• Relevant experience in information security operations, technical support, infrastructure, or a comparable security‑focused role.
• Hands‑on experience reviewing and investigating security alerts using SIEM, EDR, cloud, network, or similar security tools.
• Good understanding of common attack techniques, indicators of compromise, log sources, authentication, networking, endpoints, and cloud environments.
• Ability to analyse incomplete information, distinguish suspicious activity from false positives, and make sound prioritisation decisions.
• Clear written and verbal communication skills, with the ability to document technical findings for different audiences.
• Motivation to develop deeper incident response skills and contribute to continuous improvement of security operations.

Required skills

• SIEM platforms
• Endpoint Detection and Response (EDR) tools
• Cloud security tools
• Network security monitoring
• Log analysis and threat intelligence
• Incident response procedures

What we offer

• Interesting and challenging work in a highly professional international team.
• Friendly and welcoming culture with a hybrid way of working.
• Extensive opportunities for professional development.
• Attractive compensation and benefits.