IT Security Analyst (SOC) | SEB, Vilnius

SEB is a leading financial services group, and at the same time, one of the largest IT employers in the Nordics & Baltics. Banking is changing rapidly, and we are proud of our reputation for being entrepreneurial and innovative in the face of change. Our brilliant techies work hard to future proof SEB’s digital architecture and customer products because it genuinely makes a huge impact for our customers and colleagues. Does that sound like a fit for you?

We are looking for a mid-level IT Security Analyst who will help SEB detect, assess, and respond to security threats across our Baltic environment. Your primary focus will be monitoring and triaging security alerts, investigating suspicious activity, and coordinating timely follow-up. You will be part of SEB Baltic IT & Information Security, accountable for cybersecurity in the SEB Baltic environment and for protecting the interests of SEB Corporate & Private customers while maintaining the highest level of service.

Triage and investigate alerts, validate potential threats, assess their impact, and prioritize follow-up actions.

Document investigation findings clearly and escalate confirmed or high-risk cases according to established procedures.

Collaborate with IT, infrastructure, application, fraud, and security teams to gather evidence and coordinate remediation.

Improve alert quality by identifying false positives, refining detection logic, and recommending updates to monitoring use cases and playbooks.

Track recurring threats and contribute to regular security monitoring reports, metrics, and trend analysis.

Support incident response activities and gradually take ownership of containment, eradication, recovery, and post-incident follow-up.

Keep up to date with threat intelligence, attacker techniques, security tools, and operational best practices.

Relevant experience in information security operations, technical support, infrastructure, or a comparable security-focused role.

Hands-on experience reviewing and investigating security alerts using SIEM, EDR, cloud, network, or similar security tools.

Good understanding of common attack techniques, indicators of compromise, log sources, authentication, networking, endpoints, and cloud environments.

Ability to analyse incomplete information, distinguish suspicious activity from false positives, and make sound prioritization decisions.

Clear written and verbal communication skills, including the ability to document technical findings for different audiences.

A collaborative and dependable approach, with the ability to work independently within defined processes and escalate when needed.

Motivation to develop deeper incident response skills and contribute to continuous improvement of security operations.

Relevant security certifications or practical training are an advantage.

Fluent in English

Interesting and challenging work in highly professional international team

Friendly and welcoming culture

Hybrid way of working

Extensive opportunities for professional development

Attractive compensation and benefits

Challenging, cutting-edge work