Skip to content
CV Rocket
Get started
How it worksThe enginePricingBlogContactSign in

Open nowPosted 13 days ago

Security L2 Analyst

nngroup170 open roles

Where
Prague
Work mode
Hybrid
Get the CV for this job

From $25 per CV, paid once. No subscription.

Your applicationOpen nowSecurity L2 Analystnngroup · Prague

  1. YouYes, apply to this one.

  2. CV RocketCV written for this posting.

  3. 25 readersRecruiter, hiring manager, skeptic. Round after round.

  4. CV RocketApplied on nngroup's own form.

The reply lands in your private mailbox

3×more interviews than doing it yourself with ChatGPT.

The clock on this job

Early applications get read.

13.1% of postings close within 7 days. Measured by our own scanner across the market. nngroup postings stay open a median of 12 days.

Share of postings closed within
  1. 2.2%1 day
  2. 4.7%3 days
  3. 13.1%7 days
  4. 21.1%14 days
  5. 35.7%30 days
  6. 58.7%60 days
This job: posted 13 days ago

nngroup median: 12 days open

The posting

Real threats. Real ownership. Real impact.

Not just forwarding alerts. Not just passing incidents to someone else.

NN Digital Hub’s Cyber Defense Core team protects millions of customers worldwide. We’re looking for a Security L2 Analyst who wants to be right where cyber defense happens - investigating threats, strengthening detections, and helping shape how our CDC works.

If you know what it means to take ownership of an incident, dig into the root cause, and help your teammates grow along the way, you’ll fit right in.

A note on shifts: Our services run 24/7, so continuous monitoring is part of the job. This role includes night and weekend shifts. With a large team and a reasonable approach to planning, we keep the schedule manageable and fair.

The day-to-day: what you’ll actually be doing

  • ​Investigate and respond to advanced security incidents across a global environment, owning them end to end, from the first alert to resolution.
  • ​Operate and fine-tune security tools, including SIEM, EDR, NDR, and IDS/IPS.
  • ​Work across AWS and Azure cloud environments.
  • ​Propose and implement improvements to detection logic, playbooks, and CDC processes.
  • ​Take part in threat hunting, purple teaming exercises, and other CDC security projects.
  • ​Mentor junior analysts and help improve the overall maturity of our CDC.

You’ll have autonomy, trust, and space to influence how we do things, not just follow existing runbooks.

What makes this a good place to work

  • ​Real cybersecurity: Meaningful incidents to investigate, not just an endless stream of alert noise.
  • ​Room to learn and grow: Support for certifications, training, and continuous development.
  • ​Hybrid working that works: A strong home office culture, flexible time off, and a setup where you can work from home most of the time. We meet in the office once a week.
  • ​People-first team: Down-to-earth colleagues, open communication, and no unnecessary formalities. No ego, no blame. Just real support.
  • ​The tools you need: A company laptop and iPhone with a fully paid plan.
  • ​Benefits that add up: Cafeteria up to 20,000 CZK, pension contributions, a MultiSport card, meal allowance, a discount on life insurance, and a contribution to home office expenses.
  • ​Referral bonus: Up to 60,000 CZK for bringing new colleagues on board.
  • ​Onboarding built around you: More in-person support during your probation period to help you settle in.

What you’ll bring

We’re not looking for a unicorn. We’re looking for a solid blue team professional with:

  • ​2-4 years of experience in SOC, Blue Team, or Incident Response.
  • ​Hands-on incident handling experience - more than copying findings into a ticket and sending them to a customer.
  • ​An analytical approach: Take ownership of an incident, form a hypothesis, validate it, take response actions, escalate when needed, and document your work as you go.

Extra points if you also bring:

  • ​A solid understanding of networking (OSI/TCP/IP), Windows and Linux internals, and Active Directory security.
  • ​Practical experience with MITRE ATT&CK and the Kill Chain.
  • ​Daily experience with tools such as Splunk, Microsoft Sentinel, Defender, CrowdStrike, Darktrace, Suricata, or similar.
  • ​Basic scripting skills in Python, PowerShell, or Bash.
  • A university degree or certifications are welcome, but not mandatory. Practical experience matters most.

From your application to an offer

First, we’ll review your CV to see how your experience matches the role. If it looks like a fit, we’ll arrange a short technical pre-screen with a couple of our senior colleagues. Next comes a longer in person interview with the team manager and Veronika from HR and then team members, where we’ll explore technical topics in more depth. If everything clicks, you’ll have a final short chat with our CDC manager. And if that goes well too, we’ll be excited to welcome you to the team!

From $25, paid onceGet the CV for this job

What happens when you press

One press. We do the rest.

  1. A CV for this posting

    Written against nngroup's own wording, from every piece of relevant proof in your profile.

  2. 25 readers review it

    Recruiter, hiring manager, skeptic and more read every draft, round after round. You get the best round.

    The review screen in CV Rocket: how each CV was read, round by round.

  3. We apply on nngroup's form

    Our application engine gets through the hardest forms there are. Where a question needs you, AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

    An application in CV Rocket: every answer filled in on the employer's form.

  4. Every reply, sorted

    nngroup's answer lands in your private mailbox, and we classify it on arrival: interview, question, rejection.

    The CV Rocket inbox: each employer reply classified as an interview, an action or a rejection.

  5. Reply with AI

    AI helps you write the email, checks it and sends it. We show you whether the recruiter read it.

  6. The interview in your calendar

    Full integration with your calendar. The invitation goes straight in.

    An interview invitation in the CV Rocket inbox, added to the candidate's calendar.
Get the CV for this job

From $25 per CV, paid once. No subscription.

Why it works

3×

more interviews than doing it yourself with ChatGPT.

ChatGPT writes a CV and never learns what happened to it. We see every reply. For each CV we know:

  • How it was written, and how the review scored it
  • When we applied, and how long after the posting went up
  • Which posting, which company, which city
  • Who got the interview, and who heard nothing

That is how we know which CVs get called.

Get the CV for this job

From $25 per CV, paid once. No subscription.

The numbers game

More applications. More interviews.

Every application goes out with its own CV, written for that posting and paid once. Send enough of them and the law of large numbers finds you the job.

Get the CV for this job
By hand5–10
With CV Rocket100
applications a day

Nearby

Live postings like this one

Same employer first, then the same role elsewhere.

Before you press

Straight answers

Get the CV for this job

From $25 per CV, paid once. No subscription.

What if my background isn't good enough?

We make the most of the background you have. The CV uses every piece of relevant proof your profile holds, and one of the 25 readers reads your whole profile and flags what the CV left out.

Do you really apply for me?

Yes, on the employer's own form, the hardest ones included. Where a question needs you, you answer it right there and AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

Is it a subscription?

No. You pay once per CV, from $25. Every application goes out with its own CV, written for that posting.

One job. One CV.
Paid once.

Pick the posting you want. We write for it, apply for you and catch the reply.

Get the CV for this job

From $25 per CV, paid once. No subscription.