Security analyst | Internship in SOC
- Salary
- €1.2K per month
- Level
- Intern
- Work type
- Hybrid · Vilnius
Not stated in the posting: visa.
Open. First seen 22 October 2026.
About the role
The world’s most advanced VPN, and a whole lot more.
If you’re a curious problem-solver who carves their own path, join the team behind Threat Protection Pro, the NordLynx protocol, and the fastest VPN on the planet—tools that put privacy, security, and control back in people’s hands.
Your impact? Helping millions take back control of their online security, privacy, and data.
Main Responsibilities
- Actively participate in the team’s on-call rotation schedule to monitor, triage, and rapidly respond to critical, out-of-hours security alerts.
- Support the incident response team through all phases of active investigations, including root cause analysis,and post-incident documentation.
- Assist in proactive threat-hunting exercises using threat intelligence and/or hypothesis-driven techniques.
- Inspect network traffic, system event logs, and endpoint data to identify Indicators of Compromise (IoCs) and suspicious behavioral patterns.
- Prepare clear, structured summaries of investigation findings, hunting metrics, and recommended remediation steps.
Core Requirements
- Currently pursuing or recently graduated with a degree in Cybersecurity, Computer Science, Information Technology, or a related technical discipline.
- Grasp of core networking protocols, operating system internals, and the cyber attack lifecycle (e.g., MITRE ATT&CK framework).
- Exposure to foundational security tooling concepts, including SIEM architectures, endpoint protection (EDR), firewalls, and network intrusion systems.
- Fluent communication in Lithuanian and English.
Bonus points for
- Hands-on experience in capture-the-flag (CTF) competitions, home labs, or platforms like TryHackMe, Hack The Box, or Blue Team Labs Online.
- Basic scripting knowledge in Python, PowerShell, or Bash for parsing log files and automating repetitive tasks.
- Familiarity with common malware analysis concepts, forensic artifacts.
- Ability to evaluate disparate data points, think critically about attacker behavior, and approach investigations systematically.
- Clear written and verbal communication skills.
- Demonstrated eagerness to learn, receptive to technical feedback, and comfortable collaborating in a dynamic team setting.
Nord Security's standard text
What We Offer
- Sharpen your edge: training, mentorship, and room to grow — always.
- Take the time you need: extra vacation days, sick days, and time off when life calls.
- Get premium healthcare: private health insurance in Lithuania and Poland — fully covered.
- Protect your peace: enjoy free subscriptions to Calm, Headspace, and Mindletic, and our own resilience and mindfulness trainings.
- Own your fitness: in-house gyms, sport cards, online workouts, and personal guidance — on us.
- Pack your bags for workation: experience our company-wide trip abroad to the fullest.
- Work from anywhere: work from wherever keeps you in the zone.
- Celebrate your milestones: birthdays, weddings, and new family members — all deserve a gift.
- Parent with ease: children’s summer camps and flexibility around the schedule — because parenting never pauses.
- Join the party: team building and company events people talk about for months.
- Unlock Cyber City: coffee bar, open gyms, kids’ room, music room, massage chairs — our Vilnius HQ is yours to enjoy.
Kindly refer to our Privacy Notice for Recruitment Candidates for comprehensive information regarding our data handling procedures throughout recruitment processes.
We expect all candidates to provide accurate and complete information during the recruitment process. While limited use of AI tools to refine application materials is acceptable, candidates remain fully responsible for ensuring that their submissions reflect their own qualifications, skills, and experience. Any failure to do so may negatively affect participation in the recruitment process. If broader AI assistance is allowed for a particular role or stage, we’ll let you know in advance.
By submitting your application, you acknowledge that it may be processed using automated tools for evaluation purposes. As part of our recruitment process, we may use an AI-based application review tool to help assess applications based on skills and experience relevant to the role. This technology is used to support - not replace - human decision-making, and every application is ultimately reviewed by a recruiter.
If you would like more information about how AI is used in this process or wish to exercise your rights under applicable data privacy laws, please contact us at privacy@nordaccount.com. Should you prefer to opt out of the automated evaluation, please submit your application directly to career@nordsec.com.
What this role asks for
Standard for security roles
Cybersecurity · Python
Common in security postings at any company.
44% of this description is written for the role. The rest is Nord Security's standard text, folded away below.
Compared with Nord Security's other open jobs.
The team: Engineering HIRES STEADILY
This role is one of 47 open in Engineering. 20 were posted in the last 30 days and the oldest in June: a team that hires all year rather than one being built.
WHAT THE TEAM WORKS WITH, ACROSS ITS POSTINGS
Docker (18 of 47), CI/CD (17 of 47), Golang (17 of 47), Git (16 of 47), AWS (14 of 47), Python (14 of 47), Android (13 of 47)
OTHER ROLES ON THIS TEAM
- iOS Engineer | Mid | NordVPN Apps Team posted Oct 22
- iOS Engineer | Mid | NordVPN Apps Team posted Oct 22
- Automation QA Engineer | Senior | NordVPN | Android team posted Oct 22
- Automation QA Engineer | Mid - Senior | NordVPN | Android team posted Oct 22
- Backend Engineer | Mid - Senior | Business Onboarding & Setup Team posted Oct 14
- Backend Engineer | Mid - Senior | Business Onboarding & Setup Team posted Oct 14
- Data Analyst | Mid-Senior | Threat Intelligence posted Oct 9
- Backend Engineer | Senior | Go | Product & Startup Experience | Saily posted Oct 7
- Backend Engineer | Senior | Go | Product & Startup Experience | Saily posted Oct 7
- Windows Engineer | Mid-Senior | C#/.NET posted Oct 5
- DevOps Engineer | Mid-Senior | Infra posted Oct 2
- DevOps Engineer | Mid-Senior | Infra posted Oct 2
- QA Automation Engineer | Mid-Senior | NordPass posted Oct 1
- QA Automation Engineer | Mid-Senior | NordPass posted Oct 1
- Quality Assurance Engineer | Mid-Senior | Mobile | Coveron posted Sep 24
- Quality Assurance Engineer | Mid-Senior | Mobile | Coveron posted Sep 24
- Agentic Product Engineer | Senior | Saily posted Sep 23
- Agentic Product Engineer | Senior | Saily posted Sep 23
- Application Security Engineer | Senior posted Sep 23
- Junior Data Acquisition Specialist | Dark Web Monitoring posted Sep 22
- Senior Data Engineer | Threat Protection posted Sep 18
- Senior Data Engineer | Threat Protection posted Sep 18
- Head of Data | Saily posted Sep 18
- Head of Data | Saily posted Sep 18
- Staff Analytics Engineer posted Sep 18
- Staff Analytics Engineer posted Sep 18
- Product Owner | Mid-Senior | Quality of Service | NordVPN posted Sep 17
- Android Engineer | Junior-Mid | NordVPN posted Sep 14
- Software Engineer | Mid | Python | QoS Team posted Sep 11
- Software Engineer | Mid | C++ | Browser Team posted Sep 11
- Software Engineer | Mid | C++ | Browser Team posted Sep 11
- Application Security Engineer | Mid-Senior | iOS posted Sep 7
- Application Security Engineer | Mid-Senior | iOS posted Sep 7
- Backend Engineer | Mid - Senior | Go | Core Team posted Sep 4
- Application Security Engineer | Mid-Senior | Low-level posted Sep 4
- Application Security Engineer | Mid-Senior | Low-level posted Sep 4
- Windows Engineer | Mid-Senior | C#/.NET posted Aug 7
- DevOps Engineer | Mid | Threat Protection posted Jul 30
- DevOps Engineer | Mid | Threat Protection posted Jul 28
- Engineering Team Lead | C++ | Threat protection team posted Jul 14
- Engineering Team Lead | C++ | Threat protection team posted Jul 14
- Application Security Engineer | Senior posted Jun 5
- Backend Engineer | Mid | PHP | Systems Team posted Jun 4
- Backend Engineer | Mid | PHP | Systems Team posted Jun 4
- Backend Engineer | Mid - Senior | Go | Coveron posted Jun 3
- Backend Engineer | Mid - Senior | Go | Coveron posted Jun 3
From the team and dates on Nord Security's own job board.
Similar jobs
- Cyber Security Analyst at Hostinger
Shares 4 skills: SIEM, Bash, Cybersecurity… · same city - Analyst I, Falcon Complete GovCloud (Hybrid, St. Louis) at CrowdStrike
Shares 5 skills: SIEM, PowerShell, Bash… - Security Engineer - Intern at COGNNA
Shares 5 skills: SIEM, PowerShell, Bash… · Intern level - Security Operations Analyst (L1-L2) at JustMarkets
Shares 4 skills: SIEM, PowerShell, Cybersecurity… - Senior Cyber Security Engineer at GoTyme PH (Philippines)
Shares 5 skills: SIEM, PowerShell, Bash… - iOS Engineer | Mid | NordVPN Apps Team at Nord Security
Also at this company
Is this your posting? Email info@careerholo.com to have it removed.