Monitoring and Triage: Regular monitoring of security tools (SIEM, EDR) and evaluation of alerts according to established procedures.
Initial Analysis: Performing basic analysis and identification of potential incidents (network intrusions, application attacks, system compromises) and their rapid prioritization.
Escalation: Effective and timely escalation of complex or unclear incidents to higher support levels (L2/L3) with complete documentation.
Documentation: Accurate logging of all actions, observations, and steps in the incident management system (ticketing).
Process Adherence: Following and applying Standard Operating Procedures (SOPs) and work instructions.
Collaboration: Close collaboration with global team members (US, India, Europe) and support in communication with other departments.
24/7 Support: Participation in shift schedules including weekends.

Bachelor's degree in Cybersecurity, Computer Science, or equivalent experience.
0–1 year of experience in Information Security or Information Technology fields (fresh graduates welcome).
Proficient English (written and spoken) for work in a global team.
Fundamental knowledge of operating systems (Windows, Linux), networking, and common application types.
Ability to work with data and recognize anomalies.
Ability to carefully follow and document procedures.
Quick ability to master new tools and procedures in a dynamic environment.

We Value

Basic familiarity with security tools (SIEM, EDR) or willingness to learn quickly.
Basic understanding of cloud security (Azure, AWS, M365).
Basic scripting knowledge (Python, PowerShell) for automating routine tasks.
Entry-level certifications (e.g., CompTIA Security+, Google Cybersecurity Certificate, or studying toward CISSP/GIAC).
Familiarity with ITIL processes (Incident management).
Experience working in a global, process-driven organization.

Remote with occasional travel to Brno
Enjoy 25 vacation days per year
Meal allowance
Benefit Plus Cafeteria Card available to all employees
To promote health and wellbeing we provide life insurance coverage, employer contribution to Pension saving scheme or long-term investment product (DIP)
Multisport Card, Makro Card, discount at T-Mobile tariffs and multiple discount programs in our partner network
Flexible working hours
Work in international environment
Recognition & Referral bonus programs
Employee Assistance Program
Free and confidential service to help with any difficulties regarding work, life and personal or family matters
Honeywell Learning & Development Center – learning platform with over 10,000 courses from Udemy
Frequent Employee Engagement activities fostering an inclusive and diverse work environment
Global employee networks to help you connect and grow
Comprehensive induction, ongoing training, and development to set you up for success, in-house and external learning platforms supporting development opportunities

Cyber Security Engineer I

Key skills