SOC Analyst (WAAP)

Role overview

A Security Operations Center Analyst focused on Web Application and API Protection (WAAP) supports the Edge Network Backend Development team by monitoring and responding to threats against web applications and APIs. The position is full-time, fully remote, and based in Poland, operating inside an engineering organization responsible for WAAP infrastructure.

Responsibilities

- Monitor WAAP alerts and security events to surface suspicious activity - Investigate suspected incidents involving web application attacks, API abuse, and related threats - Triage, document, and escalate findings in line with established procedures - Collaborate with backend engineering teams on detection rules and tuning - Participate in post-incident reviews and team knowledge sharing

Requirements

- Foundational knowledge of web application and API security concepts - Familiarity with SOC workflows such as monitoring, triage, and incident response - Ability to analyze logs and security telemetry to identify potential threats - Clear written communication for incident documentation and reporting - Comfort working remotely within a distributed engineering team

Nice to have

- Exposure to web application firewalls, API gateways, or edge networking platforms - Hands-on experience with SIEM or similar security monitoring tools - Relevant security certifications or equivalent practical experience

Benefits and work setup

- Remote, full-time engagement based in Poland