Senior Cybersecurity Analyst - (Cyber Defense Operations)

Description

The company is hiring a Senior Cybersecurity Analyst for its global Cybersecurity Operations team, which protects critical environments and supports international organizations against changing cyber threats.

You will join a 24x7 Security Operations Centre (SOC) and work alongside cybersecurity specialists around the world to monitor, investigate and respond to security incidents. This is a hands-on role in which your technical skills feed directly into better threat detection, incident response and overall security.

The company is an international consulting group focused on innovation and business transformation through technology. It has over 7,200 consultants in 21 countries, a turnover of €850M, and is headquartered in Paris. Over the past 22 years it has built a strong presence in IT and consulting, and it is on track to reach €1 billion in revenue this year. Its core areas are Data & Technologies, Cloud & Application Services, and Management & Innovation Consulting, which includes Cybersecurity. Its clients come from Transport & Logistics, Financial Services, Energy & Utilities, Retail, and Media & Telecommunications.

Responsibilities

• Monitor, triage and investigate alerts from SIEM, EDR, Microsoft Security and cloud environments.
• Look into suspected threats and incidents, determine their root causes and recommend fixes.
• Analyze logs from Windows, Linux, databases, applications, web servers, firewalls and network security systems.
• Partner with Incident Response teams and specialists to contain and resolve threats.
• Operate and maintain security monitoring and detection tools, improving detection quality and cutting false positives.
• Write clear security reports, incident summaries and technical findings for clients.
• Handle security tickets and make sure every incident is documented properly.
• Help improve SOC processes, procedures, documentation and knowledge bases.
• Work directly with clients to learn their environments and tune security monitoring.
• Keep up with new threats, technologies and cybersecurity best practice.

Requirements

• Strong technical skills paired with a proactive, collaborative approach.
• 5+ years of experience in IT, Cybersecurity or Security Operations.
• Hands-on SOC experience, including alert triage and incident investigation.
• Strong knowledge of SIEM and EDR technologies.
• Experience with at least one of Microsoft Sentinel, Splunk, QRadar, ArcSight or ELK.
• Experience with Microsoft Security products, including Defender for Endpoint, Microsoft 365, Sentinel, Azure Security and XDR.
• Strong understanding of Azure, AWS and/or GCP.
• Experience with at least one EDR solution, such as Microsoft Defender for Endpoint or CrowdStrike.
• Strong knowledge of networking and TCP/IP.
• Excellent experience analyzing security logs on Windows and Linux.
• Knowledge of email security, network monitoring and incident response.
• Experience handling security tickets.
• Excellent spoken and written English.
• Nice to have: experience in an Incident Response team, particularly Tier I/II.
• Nice to have: experience monitoring AWS environments, including IaaS, PaaS and SaaS.
• Nice to have: scripting in Python, PowerShell, Bash, Ruby or similar.
• Nice to have: certifications such as SC-200, GCIH, CEH, GCFA, GIAC, CCNA or MCSE.
• Nice to have: experience working in a global, distributed SOC.

Conditions

Full-time permanent employment contract or contractor arrangement.

Remote work from Spain or any other European country.

The company Spain is committed to non-discrimination on grounds of gender, race, ideology or any other reason, in line with its Equality Plan and Royal Decree-Law 6/2019.

Benefits

• Opportunities for professional growth and learning.
• Chance to join a multicultural team and work in an international setting.
• Benefits for physical, emotional and financial wellbeing: private medical insurance, life insurance, a lunch and transport card within the flexible pay package, and online language classes.
• Smart Office Pack.