Cybersecurity Analyst – Tier 2

About the role

We are a Cloud and Cybersecurity provider seeking a curious and proactive Cybersecurity Analyst – Tier 2 to join our Security Operations team. The role focuses on deep analysis of security alerts, handling Tier 1 escalations, investigating incidents and coordinating initial response actions to contain and mitigate threats.

Key responsibilities

• Analyze data and logs from NDR, EDR, firewalls and system events.
• Provide operational guidance and technical solutions to contain and mitigate security incidents in collaboration with SecOps and CSIRT teams.
• Draft detailed incident reports, including root‑cause analysis, corrective actions and recommendations.
• Work with SecOps to optimise security system configurations and implement new rules in SIEM and SOAR platforms.
• Monitor emerging cyber‑threat trends and share insights to improve detection and response capabilities.

Required profile

• Bachelor’s degree in Computer Science or a related field.
• 2‑3 years of experience in operational cybersecurity or security incident management.
• Fluent in Italian and English (written and spoken); French or Spanish a plus.
• Strong organisational skills, attention to detail and ability to work under pressure.
• Team‑oriented, independent and available for on‑call shifts, including holidays and weekends.

Required skills

• Advanced knowledge of SIEM, NDR, EDR and SOAR technologies.
• Proven experience in log analysis and security event correlation.
• Familiarity with cyber‑attack techniques (MITRE ATT&CK) and corresponding defence methodologies.
• Basic understanding of forensic analysis and data‑recovery tools.
• Relevant certifications such as GIAC, ECSA or CEH (optional).