About the company
Wrike is the most powerful work management platform, built for teams and organizations looking to collaborate, create, and exceed every day.
Responsibilities
- Monitor, triage, and investigate security alerts and events, including escalations from the 24/7 MDR partner (Rapid7)
- Assess risk and impact of potential incidents, conducting end-to-end investigations (log analysis, endpoint forensics, scoping) and taking remediation actions
- Participate in the SOC on-call rotation
- Continuously refine and tune detection rules to minimize false positives
- Contribute to threat hunting initiatives across endpoints, identity providers, SaaS platforms, and cloud environments
- Help document, refine, and optimize SOC playbooks, runbooks, incident reports, and escalation workflows
Requirements
- 2–3+ years of hands-on experience in a SOC or security monitoring environment
- Hands-on experience with SIEM platforms (Rapid7 InsightIDR or similar) and EDR/antimalware tooling
- Strong understanding of network security fundamentals, common threat vectors, and MITRE ATT&CK
- Sharp analytical skills with advanced written and verbal English communication
- Ability to participate in an on-call rotation including occasional nights and weekends
- Standout: experience with Splunk, Wazuh, Microsoft Defender for Endpoint, CrowdStrike, Okta, Google Workspace, AWS, or GCP
- Standout: threat hunting, detection engineering, or automation using Python/Bash
- Standout: certifications such as Security+, CySA+, GCIH, GCDA
Conditions
- 18 calendar days of paid vacation
- 12 days of National & Festival holidays
- Sick leave compensation, menstrual leave, parental leave
- Group medical insurance, term life insurance, personal accident insurance
- Monthly broadband reimbursement
- Hybrid working model with complimentary lunch & snacks