Remote opportunity at
BlueVoyantSOC Security Analyst L2
BlueVoyant is an AI-driven cybersecurity company that safeguards organizations worldwide by protecting networks, identities, vendors, and digital footprints. Led by industry executives and former government cyber…
Career Tools
About This Role
BlueVoyant is an AI-driven cybersecurity company that safeguards organizations worldwide by protecting networks, identities, vendors, and digital footprints. Led by industry executives and former government cyber officials, the organization combines artificial and human intelligence to combat advanced security threats. The company is seeking a SOC Security Analyst L2 to join its Security Operations Center. In this remote position based in Romania, the analyst will investigate security alerts, manage ticketing queues,…
Job Description
BlueVoyant is an AI-driven cybersecurity company that safeguards organizations worldwide by protecting networks, identities, vendors, and digital footprints. Led by industry executives and former government cyber officials, the organization combines artificial and human intelligence to combat advanced security threats.
The company is seeking a SOC Security Analyst L2 to join its Security Operations Center. In this remote position based in Romania, the analyst will investigate security alerts, manage ticketing queues, execute initial response actions, and escalate complex incidents to L3 analysts. This role suits professionals capable of thriving in a fast-paced global team while adhering to established operational standards and client-approved procedures.
Employees operate under a rotating 4-on / 4-off shift schedule across Early, Middle, and Night shifts. Team members collaborate closely with senior analysts, L1 personnel, and clients to decrease the impact of security events, tune detection rules, and improve standard runbooks.
Responsibilities
- Manage and triage security tickets and alerts originating from EDR, SIEM logs, and endpoint logs
- Investigate suspicious files, emails, URLs, and infrastructure to determine if activity is benign or malicious
- Execute initial containment actions following runbooks, such as disabling compromised accounts or isolating endpoints
- Communicate directly with clients to deliver ticket updates, request information, and provide remediation guidance
- Escalate complex or confirmed incidents to L3 analysts with detailed documentation and supporting evidence
- Propose tuning improvements to address false-positive or benign detections and contribute to procedure updates
Requirements
- Must be a resident of and legally authorized to work in Romania
- Capable of handling a high-volume ticket queue efficiently within a fast-paced setting
- Demonstrated written and verbal communication abilities to explain technical concepts clearly
- Experience working with EDR solutions, Cloud App Security tools, and SIEM platforms
- Familiarity with web, email, endpoint, and authentication log analysis along with network protocols
- Understanding of attack techniques including phishing, credential harvesting, business email compromise, and lateral movement
Qualifications
- Three or more years of hands-on TOC, SOC, or NOC experience
- Background working in an MSP or MSSP environment supporting multiple clients
- Familiarity with basic sandboxing or malware analysis
- Experience writing KQL or SPL queries for SIEM platforms
- Knowledge of scripting languages like Python or PowerShell
- Certifications such as Security+, CySA+, Network+, GIAC credentials, Microsoft SC-200, or CEH
- Bachelor's degree in Computer Science, Information Security, or an equivalent IT-related discipline
Core Skills
Benefits
- Competitive compensation package
- Comprehensive benefits covering wellbeing, career development, and professional growth
Frequently Asked Questions
Answers are based only on the employer’s listing; where it doesn’t say, neither do we.
Where is the position located?
The role is remote, but applicants must be residents of and legally authorized to work in Romania.
What is the shift schedule for this role?
The schedule follows a 4-on / 4-off rotation, shifting every 28 days between Early, Middle, and Night shifts based on Romania time.
What salary does BlueVoyant offer for this role?
The source posting does not specify a salary.
What type of employment is this?
The job posting indicates it is a full-time position.
Sample Interview Questions
AI-generated questions tailored to this specific role — a preview of the full practice set.