SOC Analyst

Wrike is the most powerful work management platform. Built for teams and organizations looking to collaborate, create, and exceed every day, Wrike brings everyone and all work into a single place to remove complexity, increase productivity, and free people up to focus on their most purposeful work.   Wrike is our people, not a place. As a distributed team, we own our growth, stay globally connected, and rely on the product we build to deliver impactful work alongside brilliant minds. You'll have real ownership over meaningful work, a global team that has your back, and the flexibility to do your best work your way. If that sounds like you, we'd love to hear from you.   Our vision:  A world where everyone is free to focus on their most purposeful work, together.   

About the Role:

With flexible, distributed-first ways of working, you'll have the support to do your best work, wherever you are. Wrike commits to its customers that their data is monitored around the clock. Our Security Operations Center delivers on that promise through a hybrid model with a 24/7 managed detection partner (Rapid7)—and our analysts are the core drivers who handle escalations, conduct deep-dive investigations, and execute immediate action.

As an L2 SOC Analyst, you will play a pivotal role in our security rotation: monitoring and triaging security alerts, responding to escalations from our MDR partner, investigating incidents end-to-end, and continuously maturing our detection capabilities to protect Wrike and our customers.

Your Impact:

• Alert Triage & Escalation: Monitor, triage, and investigate security alerts and events, including direct escalations from our 24/7 MDR partner (Rapid7).
• Incident Containment & Forensics: Assess risk and impact of potential incidents, conducting end-to-end investigations (log analysis, endpoint forensics, scoping) and taking swift remediation actions.
• On-Call Coverage: Participate in the SOC on-call rotation to guarantee round-the-clock escalation coverage.
• Detection Engineering & Tuning: Continuously refine and tune detection rules to minimize false positives and identify genuine threats faster.
• Proactive Threat Hunting: Contribute to threat hunting initiatives across endpoints, identity providers, SaaS platforms, and cloud environments.
• Process Improvement: Help document, refine, and optimize SOC playbooks, runbooks, incident reports, and operational escalation workflows.

Your Qualifications: