Senior Cybersecurity Analyst - (Cyber Defense Operations)

Description

The company is a global cybersecurity operations team that protects critical environments and supports international organizations against changing cyber threats.

You will work in a 24x7 Security Operations Centre (SOC) alongside cybersecurity specialists around the world to monitor, investigate and respond to security incidents. The role is hands-on, and your technical skills will directly improve threat detection, incident response and overall security.

The company is part of the company, an international consulting group with over 7,200 consultants in 21 countries and a turnover of €850M. The company is headquartered in Paris, has operated for 22 years, and expects to reach €1 billion in revenue this year.

The company's core areas are Data & Technologies, Cloud & Application Services, and Management & Innovation Consulting, which includes support for Cybersecurity. Its clients come from Transport & Logistics, Financial Services, Energy & Utilities, Retail, and Media & Telecommunications.

Responsibilities

• Monitor, triage and investigate alerts from SIEM, EDR, Microsoft Security and cloud environments.
• Find the root cause of suspected threats and incidents and decide on the right remediation.
• Analyze logs from Windows, Linux, databases, applications, web servers, firewalls and network security systems.
• Work with Incident Response teams and specialists to contain and resolve threats.
• Maintain security monitoring and detection tools, improving detection quality and cutting false positives.
• Write clear security reports, incident summaries and technical findings for clients.
• Handle security tickets and make sure every incident is documented properly.
• Improve SOC processes, procedures, documentation and knowledge bases.
• Work directly with clients to understand their environments and tune security monitoring.
• Keep up with new threats, technologies and cybersecurity best practices.

Requirements

• You combine strong technical skills with a proactive, collaborative approach.
• You have at least 5 years of experience in IT, Cybersecurity or Security Operations.
• You have hands-on SOC experience, including alert triage and incident investigation.
• You have strong knowledge of SIEM and EDR technologies.
• You have used platforms such as Microsoft Sentinel, Splunk, QRadar, ArcSight or ELK.
• You have experience with Microsoft Security technologies, including Defender for Endpoint, Microsoft 365, Sentinel, Azure Security and XDR.
• You have a solid understanding of Azure, AWS and/or GCP.
• You have used at least one EDR solution, such as Microsoft Defender for Endpoint or CrowdStrike.
• You have strong knowledge of networking and TCP/IP.
• You have excellent experience analyzing security logs from Windows and Linux environments.
• You know email security, network monitoring and incident response.
• You have experience managing and processing security tickets.
• You speak and write English excellently.
• Nice to have: experience in an Incident Response team, particularly Tier I/II.
• Nice to have: experience monitoring AWS environments, including IaaS, PaaS and SaaS.
• Nice to have: scripting with Python, PowerShell, Bash, Ruby or similar.
• Nice to have: certifications such as SC-200, GCIH, CEH, GCFA, GIAC, CCNA or MCSE.
• Nice to have: experience working in a global, distributed SOC.

Conditions

Full-time permanent employment or contractor arrangement.

Remote work from Spain or another European country.

The company Spain is committed to non-discrimination on grounds of gender, race, ideology or any other reason, under its Equality Plan and Royal Decree-Law 6/2019.

Benefits

• Opportunities for professional growth and learning.
• Work in a multicultural, international team.
• Private medical insurance, life insurance, a lunch and transport card within the flexible pay package, and online language classes.
• Smart Office Pack.