Praca w miastach:Praca IT Warszawa•Praca IT Kraków•Praca IT Wrocław•Praca IT Szczecin•Praca IT Poznań•Praca IT Lublin•Praca IT Katowice•Praca IT Bydgoszcz•Praca IT Łódź•Praca IT Białystok•Praca IT Toruń•Praca IT Gdańsk
Stanowiska:Grafik komputerowy praca•Tester gier praca•Programista praca•Tester oprogramowania praca•Frontend Developer praca•Data scientist praca•Tester manualny praca•Tester praca•Analytics praca•Tester aplikacji praca•Programista java praca•Web developer praca
Technologie i narzędzia:Python praca•Cyberbezpieczeństwo praca•Java praca•Bazy danych praca•Cisco praca•C++ praca•Javascript praca•SQL praca•Business Intelligence praca•Delphi praca•Wordpress praca•Testowanie aplikacji praca•C# praca•PHP praca
Specjalizacje:Backend praca•Devops praca•Frontend praca•Full-stack praca•GameDev praca•Mobile praca•Embedded praca•Architecture praca•QA/Testing praca•Security praca•AI/ML praca•Big data science praca•Helpdesk praca•IT admin praca•Agile praca•Product Management praca•Project Management praca•UX/UI praca•Business analytics praca•SAP & ERP praca•System analytics praca•PO/PM praca•Scrum master praca•Analityka praca•Data analytics & BI praca
Offer summary
(Summary generated by AI based on the full job description)
The project focuses on protecting web applications and APIs from DDoS, bots, and application-layer attacks using Gcore WAAP. Key technical requirements include knowledge of WAF, DDoS, HTTP, TCP/IP, TLS, log analysis skills, and ability to distinguish malicious from legitimate traffic. Main responsibilities include monitoring, triaging false positives, preparing threat reports, and incident escalation. The offer includes flexible working hours, private medical insurance, and up to 45 days of remote work per year.
from: 7 September 2026
to: 7 October 2026
salary not specifiedcontract of employment (full-time)
Salary details
basic salary
Offer parameters
level:mid
working mode:remote
location:Kraków, Lesser Poland
Kraków, Lesser Poland
Requirements
Expected technologies
HTTP
TCP
IP
TLS.
Optional technologies
SQL
Python
Operating system
Linux
Our requirements
- Understanding of web security fundamentals: WAF, DDoS, bots, OWASP Top 10.
- Solid basics in HTTP, TCP/IP, TLS.
- Comfortable analyzing logs and reading dashboards; can spot anomalies in traffic.
- Able to distinguish malicious from legitimate traffic and reason about false positives.
- Clear written English for customer-facing reports.
- Reliable, detail-oriented, and calm under incident pressure.
- Willingness to work in a shift/on-call rotation.
Optional
- Prior SOC L1/L2 or related experience.
- Basic query/scripting: SQL-like log queries, regex, a bit of Python.
- Familiarity with CDN/WAF platforms (Cloudflare, Akamai, Imperva, F5, Radware).
- Exposure to SIEM / alerting tooling and PagerDuty-style on-call.
- Security certifications (e.g. CompTIA Security+) - a plus, not a requirement.
- Deep threat research, exploit development, malware reverse-engineering. That work stays with our Threat Researchers - this role feeds them clean, triaged signal and takes the routine off their plate.
Your responsibilities
- Monitor WAAP and DDoS activity across customer accounts - dashboards, alerts, and traffic patterns - and recognize when something needs attention.
- Triage false positives: review traffic flagged by security policies, confirm or dismiss, and keep noise down for customers (this is a large, daily part of the job).
- Prepare reports: weekly threat summaries per customer and post-incident DDoS reports, in clear customer-facing English.
- Alert and escalate: when an attack is impacting a customer, signal the engineering team or Support with the right context - e.g. a customer needs to be tagged or a policy adjusted - and follow the escalation runbook.
- Support customer onboarding: apply standard security configuration based on the customer's profile (resource type, traffic volume, legitimate-traffic exclusions) following playbooks.
- Follow the reaction-time SLA - our commitment to customers is speed of reaction and clear post-incident reporting, not a prevention guarantee.
- Contribute to and maintain runbooks so responses are consistent and repeatable.
About the project
Gcore WAAP protects customer web applications and APIs against DDoS, bots, and application-layer attacks at CDN edge scale. We are building out a proactive, managed-support offering for enterprise customers, and we need a SOC Analyst to run the day-to-day security operations: watch traffic and alerts, triage false positives, prepare customer-facing threat reports, and escalate real impact to the right team. You will work alongside our Threat Researchers, taking the operational load off them so they can focus on deep analysis. You do not need to be a threat-hunting expert.
You need to be reliable, observant, comfortable in logs and dashboards, and able to tell an attack from legitimate traffic - and know when to escalate.
Explicitly NOT Required
Deep threat research, exploit development, malware reverse-engineering. That work stays with our Threat Researchers - this role feeds them clean, triaged signal and takes the routine off their plate.
Why This Role Matters
You become the first line of Gcore WAAP's managed security operations - the person who keeps customers informed and protected day to day, and who lets our specialists focus on the hard problems. High visibility, direct customer impact, and a clear path to grow into threat research or detection engineering.
Equal Opportunity Employer
We provide equal opportunity to all applicants without regard to race, color, religion, sex, sexual orientation, age, gender identity, gender expression, national origin, disability, or any other legally protected characteristics.
What we offer
- Competitive compensation
- Flexible working hours and hybrid or remote options, depending on your role
- Work from anywhere in the world for up to 45 days per year
- Private medical insurance for you and your family*
- Extra paid vacation and sick leave days*
- Support for life’s important moments and celebrations
- Language courses to help you connect and grow
- Modern, welcoming offices with snacks, drinks, and entertainment*
- Team sports and social activities*
Benefits
- private medical care
- sharing the costs of foreign language classes
- remote work opportunities
- flexible working time
- integration events
- extra leave
G-CORE INNOVATIONS SOCIETE A RESPONSABILITE LIMITEE
The world’s digital experiences run on something invisible: the infrastructure and software that keep them fast, reliable, and secure. At Gcore, you’ll help design and deliver that foundation for an AI-driven world.
We’re a global provider of infrastructure and software solutions for AI, cloud, network, and security, powering everything from real-time communication and streaming to enterprise AI and secure web applications. With 210+ edge locations, 50+ cloud regions, and thousands of GPUs, your work here can reach users and businesses across the globe.
You’ll collaborate with leading technology partners such as Intel, NVIDIA, Dell, and Equinix, and work on platforms that power digital products used around the world. Our vision is simple: to connect the world to AI, anywhere, anytime.
Want to work on technology that goes beyond a single product or industry? Join a global team of 550+ professionals building infrastructure and software that supports the entire digital ecosystem.
SOC Analyst (WAAP)
I apply to:
G-CORE INNOVATIONS SOCIETE A RESPONSABILITE LIMITEE
Kraków, Lesser Poland
Pracodawca zbiera zgłoszenia przez swój system.
Przejdziesz na zewnętrzny formularz.
By clicking "Aplikuj" you confirm that you've read and accepted our Terms and Conditions.
This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.
Need more information?
- Make sure the body of the offer doesn’t already include what you’re looking for.
- Ask a question if you need more information you’re interested in.
- We’ll forward your question to the employer and aim to provide a response within 3 business days.