Senior Cybersecurity Analyst - (Cyber Defense Operations)

Description

A global cybersecurity operations team protects critical environments and supports international organizations against changing cyber threats.

You join a round-the-clock Security Operations Centre (SOC) alongside specialists worldwide, watching for, examining and acting on security incidents. The work is hands-on, and your technical skill feeds into better threat detection, incident response and overall security.

Strong technical skills and a proactive, team-minded approach matter more here than a specific title.

The company is an international consulting group focused on innovation and business transformation through technology. It has over 7,200 consultants in 21 countries, a turnover of €850M, and headquarters in Paris. After 22 years in IT and consulting, it expects to reach €1 billion in revenue this year.

Its work covers data and technology, cloud and application services, and management and innovation consulting. Clients include transport and logistics, financial services, energy and utilities, retail, and media and telecommunications firms.

Responsibilities

• Watch, sort and investigate alerts from SIEM, EDR, Microsoft Security and cloud platforms.
• Look into threats and incidents to find root causes and the right fixes.
• Coordinate with incident response staff and specialists to contain and close threats.
• Review logs from Windows, Linux, databases, applications, web servers, firewalls and network security systems.
• Operate and tune monitoring and detection tools to sharpen detection and cut false positives.
• Write clear security reports, incident summaries and technical findings for clients.
• Work directly with clients to learn their environments and improve monitoring.
• Handle security tickets and keep incident records complete.
• Improve SOC processes, procedures, documentation and knowledge bases.
• Keep up with new threats, technologies and cybersecurity best practice.

Requirements

• 5+ years of experience in IT, cybersecurity or security operations.
• Hands-on SOC experience, including alert triage and incident investigation.
• Solid knowledge of SIEM and EDR technology.
• Experience with platforms such as Microsoft Sentinel, Splunk, QRadar, ArcSight or ELK.
• Experience with Microsoft Security products, including Defender for Endpoint, Microsoft 365, Sentinel, Azure Security and XDR.
• Solid understanding of Azure, AWS and/or GCP.
• Experience with at least one EDR solution, such as Microsoft Defender for Endpoint or CrowdStrike.
• Strong knowledge of networking and TCP/IP.
• Excellent skill analyzing security logs across Windows and Linux.
• Knowledge of email security, network monitoring and incident response.
• Experience managing and processing security tickets.
• Excellent spoken and written English.
• Plus: experience in an Incident Response team, particularly Tier I/II.
• Plus: experience monitoring AWS environments, including IaaS, PaaS and SaaS.
• Plus: scripting with Python, PowerShell, Bash, Ruby or similar.
• Plus: certifications such as SC-200, GCIH, CEH, GCFA, GIAC, CCNA or MCSE.
• Plus: experience working in a global, distributed SOC.

Conditions

Full-time permanent employment contract, or contractor mode.

Remote, based in Spain or any other European country.

The company is committed to non-discrimination based on gender, race, ideology or any other reason, under its Equality Plan and Royal Decree-Law 6/2019.

Benefits

• Professional growth possibilities and learning opportunities.
• Multicultural team and international work environment.
• Private medical insurance.
• Life insurance.
• Lunch and transport card as part of the flexible remuneration package.
• Online language classes.
• Smart Office Pack.