Back to SearchLooking for something else?
Find a vacancy that works for you. Send us your CV to receive a personalized offer.
Find me a job
We are looking for a talented Security Analyst experienced in Cyber/Information/Network/Cloud Security in enterprise environments, with basic knowledge of threat analysis of event data from commercial and open-source infrastructure technology platforms.
Shift rotation is 2 days on, 2 days off, 12 hours, with 11 work hours and 1 hour for rest.
Responsibilities
- Monitor on-prem and AWS infrastructure for attacks, intrusions and unusual, unauthorized or illegal activity
- Monitor identity and access management, including monitoring for abuse of permissions by authorized system users
- Create SIEM and SOAR detection and remediation scenarios, and implement them as rules
- Create, test and update playbooks
- Perform threat hunting and support threat intelligence processes
- Carry out other security operations activities alongside security monitoring
- Generate reports for both technical and non-technical staff and stakeholders
- Use advanced analytic tools to determine emerging threat patterns and vulnerabilities
Requirements
- 1+ years of experience with SIEM solutions such as Splunk, QRadar, ArcSight, LogRhythm, ELK or Wazuh
- Experience with SIRP/SOAR tools such as TheHive, Cortex, Phantom, XSOAR or Resilient
- Knowledge of Internet security, networking protocols, and related technologies, including IDS/IPS, firewalls and content filtering
- Familiarity with Network Behavior Analysis tools, anti-malware, and packet inspection
- Understanding of Windows, Linux, DB and network device monitoring and logging techniques
- Understanding of host and network security hardening, networking protocols, common intrusion techniques and common risk management concepts
- Knowledge of malware detection, intrusion detection and prevention systems
- Proficiency in English at a B2+ level
Nice to have
- Experience with AWS
- Experience with network security
- Experience with Firewalls such as F5, Juniper, Check Point, Palo Alto or Cisco