Security Analyst (part-time)

About the role

We are looking for a Security Analyst to join our Security Operations Center (SOC) team in Estonia.

This is a hands-on technical role focused on investigating and resolving urgent customer-reported issues and security incidents affecting web applications and APIs.

You will troubleshoot issues involving Web Application Firewalls (WAF), HTTP traffic, Linux systems, networking, and cloud infrastructure. When necessary, you will adjust security configurations, resolve application connectivity issues, and coordinate escalations with other teams.

This is a weekend-based, pager-driven on-call position. Security Analysts cover approximately two weekends per month, from Saturday morning to Monday morning. During assigned weekends, you will be available to respond to urgent customer tickets and incident notifications through PagerDuty. Continuous active monitoring is not required; work is performed when urgent issues arise.

Job responsibilities

• Respond to urgent customer support tickets and incident notifications through Zendesk and PagerDuty.
• Investigate and resolve technical and security-related incidents affecting protected web applications and APIs.
• Analyze application logs, HTTP traffic, and monitoring data to identify root causes.
• Troubleshoot issues involving WAF behavior, application connectivity, Linux, networking, Nginx, and cloud infrastructure.
• Investigate WAF false positives and adjust security rules or customer-specific configurations when necessary.
• Use internal tools, REST APIs, and Git-based workflows to investigate issues and apply fixes.
• Communicate findings and resolutions clearly to customers and internal teams.
• Escalate complex incidents to engineering or other teams when required.
• Document incidents, troubleshooting steps, and resolutions.

What makes you a good fit

• Practical experience with Linux systems and command-line (CLI) troubleshooting.
• Good understanding of TCP/IP, HTTP/HTTPS, HTTP headers, DNS, TLS, reverse proxies, and WebSocket.
• Familiarity with web application security, common web attacks, and Web Application Firewalls (WAFs).
• Ability to analyze logs, HTTP traffic, and application behavior to identify technical issues and root causes.
• Familiarity with Nginx, JSON/YAML configurations, REST APIs, and Git.
• Basic Python and/or Bash scripting skills.
• Strong analytical and troubleshooting skills, with a methodical approach to problem-solving.
• Good written and spoken English, with the ability to communicate clearly with customers and internal teams.
• Ability to work independently, prioritize urgent incidents, and recognize when escalation is necessary.

Nice to have

• Previous experience in SOC, technical support, incident response, or cloud operations.
• Experience with AWS or other cloud infrastructure.
• Familiarity with Zendesk, PagerDuty, Grafana, Loki, or Prometheus.
• Experience troubleshooting WAF rules, Nginx configurations, and TLS certificates.
• A degree in cybersecurity, computer science, IT, or a related field.
• Relevant certifications such as Security+, GISF, SSCP, Network+, or CCNA.

What we value

We are looking for someone who:

• Enjoys investigating technical problems and identifying root causes.
• Takes ownership of incidents and follows them through to resolution or escalation.
• Can remain methodical and focused when handling urgent issues.
• Is comfortable working independently and communicating directly with customers.
• Makes careful changes to production configurations and understands their potential impact.
• Is reliable, detail-oriented, and willing to learn unfamiliar technologies.

Why join us?

• Work on real-world technical and security incidents involving production web applications and APIs.
• Gain hands-on experience with a production WAF and API security platform.
• Develop expertise in Linux, networking, Nginx, cloud infrastructure, and security troubleshooting.
• Collaborate with experienced security analysts and engineering teams.
• Benefit from a predictable weekend on-call rotation of approximately two weekends per month.