Accesa is a leading technology company headquartered in Cluj-Napoca, with offices in Oradea and 20 years of experience in turning business challenges into opportunities and growth.

A value-driven organisation, it has established itself as a partner of choice for major brands in Retail, Manufacturing, Finance, and Banking. It covers the complete digital evolution journey of its customers, from ideation and requirements setup to software development and managed services solutions.

With more than 1,200 IT professionals, Accesa also has a fast-growing footprint, establishing itself as an employer of choice for IT professionals who are passionate about problem-solving through technology. Coming together in strong tech teams with a customer-centric approach, they enable businesses to grow, delivering value for our clients, partners, industry, and community.

We are looking for a SOC Analyst - Level 1 who can take ownership of routine security investigations, not just review alerts and pass them on. The role combines hands-on alert analysis, evidence correlation, clear case documentation, sound recommendations, and reliable handoff quality.

This is a shift-based live operations role. You will be expected to work as part of a rota that may include day, late, night, and weekend shifts, with public-holiday coverage only where the agreed service model requires it. Good handover discipline and clear shift continuity are part of the role.

This is not just a queue-monitoring role, and it is not a senior incident leadership position. You will be expected to work cases properly, reach a well-supported view of what is happening, and either move the case to closure within your scope or escalate it cleanly when impact, uncertainty, or complexity goes beyond it

Responsabilities

• Security Investigation & Analysis: Investigate security alerts, correlate evidence across multiple sources and assess potential threats to reach well-supported conclusions.
• Incident Handling & Escalation: Manage routine security cases within your scope, recommend appropriate next steps and escalate complex or high-impact incidents with clear supporting evidence.
• Security Monitoring: Analyse security events across endpoint, identity, email, cloud and network environments to identify suspicious activity and potential security risks.
• Case Documentation & Reporting: Maintain accurate investigation records, document findings and recommendations, and ensure clear communication throughout the incident lifecycle.
• Shift Operations & Handover: Support continuous security operations through structured shift handovers, reliable case continuity and adherence to operational procedures, including day, late, night and weekend shifts as required.
• Continuous Improvement: Identify opportunities to improve detection accuracy, reduce alert noise, optimise investigation workflows and enhance security playbooks and automation.

Must Have:

• Experience with security investigations and alert analysis in a SOC, MDR or similar operational security environment.
• Ability to collect, validate and correlate evidence across multiple security data sources.
• Working knowledge of endpoint, identity, email, cloud and network security concepts.
• Familiarity with security monitoring, incident investigation, case management and escalation workflows.
• Strong analytical skills, sound judgement and the ability to provide evidence-based recommendations.
• Clear written and verbal communication skills in English, with a structured approach to documentation and incident handovers.
• Willingness to work in a shift-based environment, including nights, weekends and public holidays where required by the service model.
• Ability to identify gaps in security detections, workflows or playbooks and recommend practical improvements.
• Regular use of AI tools to improve productivity, reduce repetitive work, support decision-making and deliver higher-quality outcomes.
• Ability to use AI responsibly through effective prompting, critical validation of outputs and ownership of final results.

Nice to Have:

• 1–4 years of experience in cybersecurity operations, incident analysis or incident response.
• Hands-on experience with Microsoft Sentinel, Microsoft Defender XDR, Cortex XSOAR, Elastic Security, Vectra NDR or similar security platforms.
• Basic knowledge of KQL or equivalent query languages for security investigations.
• Experience working across multiple enterprise technologies and security environments.
• Exposure to detection tuning, playbook optimisation or security investigation automation.
• Familiarity with common cybersecurity frameworks, including MITRE ATT&CK.
• Relevant certifications such as CompTIA Security+, CompTIA CySA+ or Microsoft SC-200.
• German language skills would be an advantage.

About You

You are comfortable taking an investigation beyond first-pass triage and turning scattered evidence into a clear case. You know when to keep working, when to recommend a practical next step, and when to escalate because the case needs faster handling or more senior support.

You communicate clearly, stay grounded in the evidence, and understand that good shift-based SOC work depends on clean handovers, reliable documentation, and consistent operational discipline.

As a people-first organisation, we believe diversity strengthens our teams and drives innovation. All employment decisions are based on merit, skills, and performance, without discriminating based on any personal characteristic. This reinforces our commitment to providing an inclusive and respectful workplace.

At Accesa you can

Enjoy our holistic benefits program that covers the four pillars that we believe come together to support our wellbeing, covering social, physical, emotional wellbeing, as well as work-life fusion.

• Physical Wellbeing: Our wellbeing program includes medical benefits, gym support, and personalised fitness options for an active lifestyle, complemented by team events and the Healthy Habits Club.
• Work-Life Fusion: In very dynamic industries such as IT, the line between our professional and personal lives can quickly become blurred. Having a one-size-fits-one approach gives us the flexibility to define the work-life dynamic that works for us.
• Emotional Wellbeing: We believe that to maintain our overall health, we need to invest in our mental wellbeing just as much as we do in our physical health, social connections or in achieving work-life balance.
• Social Wellbeing: As a growing community in a hybrid environment, we want to ensure we remain connected not just by the great work we do every day but through our passions and interests.