Senior Cybersecurity Analyst - (Cyber Defense Operations)

Description

This Senior Cybersecurity Analyst role sits in a worldwide Cybersecurity Operations team that guards critical environments and supports international organizations facing shifting cyber threats.

You will work in a 24x7 Security Operations Centre (SOC) alongside specialists around the world, monitoring, investigating and responding to security incidents.

The work is hands-on, and your technical skills will feed directly into better threat detection, incident response and overall security.

The company is an international consulting firm with more than 7,200 consultants in 21 countries, €850M in turnover and headquarters in Paris.

Over the past 22 years it has built a strong presence in IT and consulting, and it is on track to reach €1 billion in revenue this year.

Its core areas are data and technologies, cloud and application services, and management and innovation consulting, which covers supply chain, cybersecurity and ESG/low-carbon strategy.

Clients come from transport and logistics, financial services, energy and utilities, retail, and media and telecommunications.

Responsibilities

• Triage and investigate security alerts from SIEM, EDR, Microsoft Security and cloud platforms.
• Find the root cause of suspected threats and incidents, and recommend the right fix.
• Review logs from Windows, Linux, databases, applications, web servers, firewalls and network security systems.
• Partner with Incident Response teams and specialists to contain and close out threats.
• Operate and tune monitoring and detection tools to raise detection quality and cut false positives.
• Write clear security reports, incident summaries and technical findings for clients.
• Handle security tickets and make sure each incident is documented properly.
• Improve SOC processes, procedures, documentation and knowledge bases.
• Work with clients directly to learn their environments and improve their monitoring.
• Keep current on new threats, technologies and security best practices.

Requirements

• Strong technical skills paired with a proactive, collaborative approach.
• 5+ years in IT, cybersecurity or security operations.
• Hands-on SOC work, including alert triage and incident investigation.
• Solid grasp of SIEM and EDR technology.
• You have worked with tools like Microsoft Sentinel, Splunk, QRadar, ArcSight or ELK.
• Experience across Microsoft Security products, including Defender for Endpoint, Microsoft 365, Sentinel, Azure Security and XDR.
• Solid knowledge of Azure, AWS and/or GCP.
• You have used at least one EDR tool, for example Microsoft Defender for Endpoint or CrowdStrike.
• Strong networking and TCP/IP knowledge.
• Excellent experience analyzing security logs on Windows and Linux.
• Knowledge of email security, network monitoring and incident response.
• Experience handling security tickets.
• Excellent spoken and written English.
• A plus: time on an Incident Response team, especially Tier I/II.
• A plus: monitoring AWS environments, covering IaaS, PaaS and SaaS.
• A plus: scripting in Python, PowerShell, Bash, Ruby or similar.
• A plus: certifications such as SC-200, GCIH, CEH, GCFA, GIAC, CCNA or MCSE.
• A plus: work in a global, distributed SOC.

Conditions

Full-time permanent employment contract, or contractor arrangement.

Remote work from Spain or any other European country.

The company is committed to non-discrimination on grounds of gender, race, ideology or any other reason, under its Equality Plan and Royal Decree-Law 6/2019 on gender equality between women and men.

Benefits

• Private medical insurance, life insurance, and online language classes.
• Lunch and transport card, paid through the flexible pay package.
• Smart Office Pack.
• Room to grow professionally and learn on the job.
• A multicultural team in an international setting.