SOC Analyst (WAAP)

Gcore is a global provider of infrastructure and software solutions for AI, cloud, network, and security. We are looking for a dedicated SOC Analyst to join our team and play a critical role in protecting customer web applications and APIs against DDoS, bots, and application-layer attacks at CDN edge scale.

Key responsibilities

• Monitor WAAP and DDoS activity across customer accounts, analyzing dashboards, alerts, and traffic patterns to identify potential threats.
• Triage false positives by reviewing flagged traffic, confirming or dismissing alerts to ensure minimal noise for our customers.
• Prepare clear, customer-facing weekly threat summaries and post-incident DDoS reports.
• Alert and escalate security incidents to the engineering or support teams with appropriate context, following established runbooks.
• Support customer onboarding by applying standard security configurations based on specific customer profiles and traffic requirements.

Requirements

• Solid understanding of web security fundamentals, including WAF, DDoS, bots, and the OWASP Top 10.
• Strong knowledge of HTTP, TCP/IP, and TLS protocols.
• Ability to analyze logs, read dashboards, and spot anomalies in traffic to distinguish between malicious and legitimate activity.
• Excellent written English skills for preparing professional reports.
• Reliability, attention to detail, and the ability to remain calm under incident pressure.
• Willingness to participate in a shift or on-call rotation.

What we offer

• Competitive compensation package.
• Flexible working hours to support a healthy work-life balance.
• Private medical insurance for you and your family.
• Extra paid vacation and sick leave days.
• Access to language courses to help you connect and grow professionally.