Cyber Defense Analyst (L1 SOC) – Sofia

About the role

We are seeking a proactive Cyber Defense Analyst to join the Cyber Defense Section of DSK Bank’s Information Security Department in Sofia. The role focuses on monitoring security events, performing initial analysis, and supporting incident response within a 24/7 SOC environment.

Key responsibilities

• Monitor data from various security systems and perform initial incident analysis.
• Identify affected systems and network segments.
• Tri­age alerts generated by the SIEM platform and follow escalation procedures.
• Assist internal teams according to established response playbooks.
• Identify and assess potential information‑security risks.
• Support remediation activities and track incident resolution.
• Prepare reports and recommendations to improve security operations.
• Ensure compliance with internal information‑security policies.
• Work on a shift‑based schedule to provide 24/7 coverage.

Required profile

• Bachelor’s degree in IT, Cybersecurity or a related technical field.
• 1–3 years of experience in IT or information security (advantageous).
• Good command of written and spoken English.
• Analytical thinking, problem‑solving abilities and teamwork orientation.
• Adaptability and willingness to learn.

Required skills

• SIEM platforms.
• IDS/IPS technologies.
• Endpoint Detection and Response (EDR) tools.
• Data Loss Prevention (DLP) solutions.
• Web Application Firewall (WAF).
• Vulnerability scanners.
• Log analysis and event correlation.

What we offer

• Professional and career development opportunities in a leading Bulgarian bank.
• Food vouchers up to 102.26 EUR per month.
• 25 days paid holiday (20+5).
• Additional health insurance and annual bonus scheme.
• Favourable housing, mortgage, and banking product conditions.
• Multisport / CoolFit card and discounts with partner companies.
• Access to professional trainings and a refer‑a‑friend bonus.