Cyber Security Analyst

About JAGGAER

JAGGAER provides an intelligent Source-to-Pay and Supplier Collaboration Platform that empowers organizations to manage and automate complex processes while enabling a highly resilient, responsible, and integrated supplier base. With 30 years of expertise, we specialize in solving complex procurement and supply chain challenges across various industries.
Our 1,300+ global employees are obsessed with ensuring customers get full value from our products - ultimately enhancing and transforming their businesses.
For more information, visit www.jaggaer.com

What We’re Looking For

Reporting to the Manager of Incident Response and Assurance, we are looking for a capable and motivated security professional to join JAGGAER's Cyber Defence team as a Cybersecurity Analyst. This is an operational role at the centre of the SOC - responsible for daily security monitoring, alert triage, incident response, and maintaining the quality and hygiene of our security toolset across corporate and cloud-based environments.
This is a mid-level individual contributor role in a lean, high-impact security team. The successful candidate brings 2–5 years of cybersecurity experience and is comfortable working independently across routine and novel security events, managing escalations, and contributing to a structured daily operations cadence without close supervision.

Security Operations and Incident Response

• Monitor and investigate security alerts across the team's toolset - including Devo (SIEM), CrowdStrike and Microsoft Defender (EDR/EPP), and Observe - triaging events with accuracy and appropriate urgency on a daily basis
• Handle alert escalation end-to-end, including escalation to the managed security service provider where applicable, and follow-through to resolution or closure with clear written documentation in Jira
• Conduct security event investigations across corporate and production environments, applying knowledge of common threat actor techniques, malware behaviour, and persistence mechanisms
• Perform incident response activities including containment, eradication, and recovery in line with JAGGAER IR playbooks
• Complete the SOC daily operations checklist without prompting, ensuring tool health, alert queue hygiene, and handover documentation are maintained to standard
• Support endpoint security operations including EDR and EPP maintenance across the CrowdStrike and Microsoft Defender estate
• Support email and web security operations across Mimecast and Zscaler, contributing to policy enforcement and escalation workflows
• Support phishing analysis and response, including triage of user submissions via KnowBe4 PhishER
• Leverage threat intelligence from Rapid7 Threat Command and the MITRE ATT&CK framework to maintain working knowledge of current threats relevant to JAGGAER's environment
• Support vulnerability escalation and tracking activities in coordination with the Vulnerability Operations function where required
• Participate in the team's rotating weekly on-call schedule via PagerDuty, responding to alerts that require active investigation or remediation outside of core hours
• Maintain reliable ticket hygiene and investigation quality across all assigned work in Jira

Collaboration and Knowledge Sharing

• Contribute to the development and maintenance of information security standards, policies, and procedures
• Produce and maintain documentation for SOC procedures, runbooks, and investigation outputs on Confluence
• Work closely with IT, GRC, Cloud Operations, and other departments to ensure alignment with security policies and procedures
• Share knowledge of tooling, processes, and findings with the broader security team in a consistent and accessible format

Must Have

• 2–5 years of experience in cybersecurity with demonstrable depth in security operations or incident response
• Practical experience with SIEM platforms including alert triage, event investigation, and documentation - Devo or comparable technology
• Experience with EDR and EPP solutions - CrowdStrike, Microsoft Defender, or comparable - including alert investigation and endpoint response
• Understanding of common threat actor techniques, malware behaviour, and persistence mechanisms
• Understanding of Microsoft Windows and Linux/Unix system-level security controls
• Ability to manage escalations end-to-end, including clear written communication of findings and recommended actions
• Reliable and consistent approach to daily operational tasks - able to work through a structured operations cadence independently and without prompting
• Strong written and verbal communication skills, including the ability to document investigations and findings clearly for both technical and non-technical audiences
• Ability to triage novel and ambiguous alerts without step-by-step guidance, forming and testing hypotheses methodically

Nice to have

• Familiarity with Devo SIEM including log pipeline concepts and alert rule structure
• Experience with email and web security tooling - Mimecast, Zscaler, or comparable platforms
• Familiarity with threat intelligence platforms - Rapid7 Threat Command or similar
• Experience with phishing triage workflows and tooling
• Prior experience contributing to incident response playbook development or SOC process improvement
• Red team or blue team experience - threat hunting or adversary simulation exposure helpful
• Familiarity with vulnerability management concepts and escalation workflows
• Experience with Azure, M365, or AWS in a security operations context
• CompTIA Security+, CySA+, BTL1, GCIH, GCIA, or relevant industry certifications

What We Offer

• A positive and fun work environment in a young and motivated team.
• Competitive salary and clear career development opportunities.
• Short communication channels and genuine room for creativity and initiative.
• An international, professional environment with exciting opportunities.
• An open-minded and dynamic corporate culture, training, and development.
• Private health insurance, FitPass, summer and winter parties, employee vouchers, New Year gifts, flexible working hours, and a wide range of work-life balance benefits.

Our Values

At JAGGAER, our business is about people. Our products are built on intellectual property, but the real differentiator is the teams behind them–the way we collaborate, innovate, solve problems, and deliver for customers. TEAM gives us a common set of expectations for how we work together across products, cultures, and geographies.

Transparency – Openness Builds Trust
Candor strengthens relationships, speeds decision-making, and ensures problems are solved together—with customers, teammates, and partners.

Entrepreneurial Spirit – Own It, Drive It, Make It
A scrappy, customer-obsessed, problem-solving mindset is at the cornerstone of both organizational and personal growth.

Accountability – Thumbs In, Not Fingers Out
We take responsibility for ourselves before pointing elsewhere.

Metrics-Driven Results – Outcomes Over Activities
Data and evidence guide our decisions, help us correct courses quickly, and ensure we’re delivering real impact.

#LI-DT1