Example Company
Software engineer
- Location
- San Francisco
- Type
- Full time
- Compensation
- $150k-$200k
- Posted
- 2 days ago
Join a team building useful software. Work closely with engineering and design to turn new ideas into products.
Loading job details
Cybersecurity Analyst (B2B)
- Location
- Warsaw · Remote
- Type
- Full time
- Posted
- 2H AGO
About the role
Source is an ecosystem of independent technology companies behind responsible access to web data. Source works behind the scenes, providing shared standards and dedicated support that help each company grow.
The culture follows the same idea: colleagues work across the ecosystem, share what they know, and hold a high bar, so a good idea in one place can create an advantage everywhere.
The culture follows the same idea: colleagues work across the ecosystem, share what they know, and hold a high bar, so a good idea in one place can create an advantage everywhere.
The team waiting for you:
The security team is responsible for safeguarding our infrastructure and applications against an ever-evolving landscape of cyber threats. As a Cybersecurity Analyst, you will be on the front lines of our operations, actively managing our SIEM environments and leading incident response efforts. With our data ecosystem rapidly expanding, scaling our security monitoring and automated detection capabilities is more timely and critical than ever. Your work here directly ensures the integrity of our complex data operations, keeping our products secure and our global customers protected.
In this role, you will:
- Monitor, triage, and investigate alerts from the SIEM (Wazuh/Elasticsearch) and other security tools, separating true positives from noise.
- Run incident response steps: containment, evidence collection, root cause analysis, and remediation follow-up.
- Build, tune, and maintain detection rules and decoders for various attack scenarios in Wazuh and Elasticsearch.
- Onboard and normalize new log sources to expand our visibility.
- Continuously improve SOC operations by identifying gaps in detection logic, playbooks, and triage workflows.
- Help assess and validate external pentest and bug bounty reports.
Your skills & experiences:
- 2-4 years of experience working in security operations, incident response, or application security.
- Experience with SIEM platforms (Wazuh, Elastic/ELK, Splunk, or similar), including writing queries and detection rules.
- Scripting skills (Python, Bash, or similar) for automation, log parsing, and building testing tools.
- Strong understanding of web technologies and how they are attacked, including HTTP/S, session management, authentication protocols (OAuth 2.0, OIDC, JWT), REST and GraphQL APIs, and browser security controls (SOP, CORS, CSP).
- Knowledge and practical experience of OWASP Top 10 exploitation.
Nice to have:
- Certifications such as OSCP, OSWE, BSCP (Burp Suite Certified Practitioner), eWPT/eWPTX, GWAPT, GCIH, or CySA+.
- Experience with WAFs, bot management, or anti-abuse systems (Cloudflare, Akamai, AWS WAF, or similar).
- Experience with cloud environments (AWS, GCP, Azure) and containerized apps (Docker, Kubernetes).
- Familiarity with Elastic Fleet/Agent and Wazuh rule and decoder development.
- "Don't meet everything above? Apply anyway. We're looking for what's next, not what's already been done."
Tech stack:
- Wazuh & Elasticsearch (ELK)
- Python & Bash
- Web Security (OAuth 2.0, OIDC, JWT, REST, GraphQL, SOP, CORS, CSP)
- Cloud & Containers (AWS, GCP, Azure, Docker, Kubernetes)
- WAFs (Cloudflare, Akamai)
Salary & Benefits
- Gross salary: 17 200 - 23 000 PLN/month. Keep in mind that we are open to discuss a different salary based on your skills and competencies.
- Growth & Learning: 40+ internal learning options, external conferences, mentorship, and year-round knowledge-sharing.
- Celebration & Community: Team events, an overseas workation and plenty of ways to mark milestones together.
- Plus bonus vacation days, paid life-moment days off, and all the tools you need. See the full list of benefits here: source.ai/career/blog/our-benefits-for-remote-employees
Similar roles
Cybersecurity AnalystSource
Technical Support Analyst I – Cybersecurity (Palo Alto Networks)TD SYNNEX North America · Mexico City- Senior Cybersecurity EngineerOdyssey · Remote
Cyber Security Analyst (PST)Human Security · New York
Senior Analyst (Fraud & Financial Crime)Zopa · London- Security Analyst II – Azure ADIntact · Vancouver · Montreal