Security Analyst – Threat Detection & Incident Response

About the role

As a Security Analyst at Proton, you will be on the front line protecting the company’s global infrastructure. You will combine threat investigation with security engineering, designing detection rules and playbooks that stop attackers before they succeed.

Key responsibilities

• Maintain, optimise and extend Proton’s SIEM and related security sensors.
• Design, build and continuously refine high‑fidelity alerts from raw infrastructure events.
• Monitor, triage and deeply investigate security alerts across all corporate systems.
• Own containment and mitigation actions during incidents and develop robust response playbooks.
• Analyse logs, endpoints and network traffic to uncover anomalies and emerging risks.
• Collaborate with engineering teams to implement secure architectures, OS hardening and strict access controls.
• Provide security guidance company‑wide and contribute findings to roadmap and tooling improvements.

Required profile

• Strong analytical mindset with data‑driven intuition.
• Excellent cross‑functional communication skills.
• Experience in security monitoring, incident response and risk mitigation.

Required skills

• SIEM configuration and tuning
• Incident response processes
• Log analysis
• Network traffic analysis
• OS hardening
• Access control implementation