Security Operations Analyst Trainee

Andersen is an international IT company and one of the leaders in software outsourcing. We create digital products for fintech, banking, healthcare, logistics, e-commerce, and many other industries. Cybersecurity at Andersen means protecting modern digital products and infrastructure, working with emerging threats, and growing in one of the most in-demand areas of IT.

A traineeship is more than just learning. It is the shortest path into IT for those who already have a solid foundation and are ready to take the next step toward a professional career.

The SOC Analyst Traineeship at Andersen is an immersion into the world of cybersecurity and the development of practical expertise in Security Operations. The program covers the key responsibilities of a SOC Analyst: security event analysis, investigation of suspicious activity, incident response, and threat detection. You will learn to work with logs, network traffic, and indicators of compromise, gain hands-on experience with SIEM platforms and security monitoring tools, and develop the ability to distinguish real threats from false positives while analyzing events through the lens of a SOC Analyst.

The program is open in Kazakhstan: candidates from Almaty are expected to attend the office during the training period, while participants from other cities across Kazakhstan can join the program online.

What we offer:

• 5 months: from your first day in the Lab to your first day on a commercial project.
• Full-time — 5 days a week, 8 hours a day: an intensive format designed to help you quickly reach a confident Junior level.
• Your own laptop. Your laptop + our training program = a specialist ready for real-world tasks.
• Practice-oriented approach. Training assignments and lab activities closely replicate real SOC Analyst tasks.
• Preparation for a successful career start. The program is designed to develop practical skills and prepare participants for work on commercial projects. As the primary goal of the traineeship is learning and professional development, no scholarship is provided during the traineeship.
• 1.5-year training agreement. You invest your time in learning, and we invest in your professional growth.
• Employment opportunity upon successful completion of the program.
  

Who we are looking for: Aspiring professionals who see their future in cybersecurity, are ready for intensive growth, enjoy analyzing information, are not afraid to investigate complex situations, and strive to understand the root cause of a problem rather than only its symptoms.

Required qualifications:

• English proficiency at Intermediate level or higher;
• Technical background (education or work experience in IT);
• Understanding of networking fundamentals: TCP/IP, the differences between TCP and UDP, DNS, HTTP/HTTPS, DHCP, common network protocols, and ports;
• Basic Linux skills (command line) and understanding of Windows fundamentals (users, processes, services, Event Viewer);
• Understanding of how modern web applications work;
• Knowledge of cybersecurity fundamentals: phishing, malware, vulnerabilities, and indicators of compromise;
• Analytical thinking and the ability to solve complex technical problems.

Nice to have:

• Participation in CTF competitions, especially Blue Team and Digital Forensics challenges;
• Self-study in cybersecurity, completion of relevant courses, or a personal lab environment for security research;
• Ability to read and analyze code or scripts (PowerShell, Bash, Python);
• Understanding of common web application attacks (SQL Injection, XSS, Brute Force, etc.);
• Skeptical thinking and the ability to analyze information independently.

What makes Andersen a great place to learn and grow:

• Experienced mentors and regular technical assessments. You will always understand your current level and know what to focus on next.
• Personal coordinator throughout the entire program. They will help with organizational matters, support you, and stay by your side until you join a project.
• Immersion in modern cybersecurity. You will learn the approaches and tools used by SOC teams to detect and investigate security incidents.
• Transparent growth system. A clear career path and real opportunities for rapid professional development.
• Continuous learning. Access to our own educational platform with courses, learning materials, and internal development programs.
• Strong engineering community. Connect with experts, exchange knowledge, participate in internal meetups, and receive support at every stage of your professional growth.

Apply now — every application will be reviewed.
Learn to see threats where others see only data.