Senior Cybersecurity Analyst - (Cyber Defense Operations)

Description

A global cybersecurity operations team protects critical environments and supports international organizations against changing cyber threats.

You will work in a 24x7 Security Operations Centre (SOC) alongside specialists around the world, monitoring, investigating and responding to security incidents.

This is a hands-on role where your technical skills will help improve threat detection, incident response and overall security.

The company is an international consulting group focused on innovation and business transformation through technology. It has over 7,200 consultants in 21 countries, a turnover of €850M and its headquarters in Paris. It has been operating for 22 years and is on track to reach €1 billion in revenue this year.

Its core areas are data and technology (architecture and data solutions, including integration, data science, visualization, Big Data, AI and Generative AI), cloud and application services (integrating SAP, Salesforce, Oracle, Microsoft, AWS and IBM Maximo to support cloud transition and operational efficiency), and management and innovation consulting (PM, PMO, Agile, Scrum, Product Ownership, plus Supply Chain, Cybersecurity and ESG/Low-Carbon strategies).

Clients include major global companies in transport and logistics, financial services, energy and utilities, retail, and media and telecommunications.

Responsibilities

• Monitor alerts from SIEM, EDR, Microsoft Security and cloud environments, then triage and investigate them.
• Look into suspected threats and security incidents, identify root causes and recommend the right remediation.
• Analyze logs from Windows, Linux, databases, applications, web servers, firewalls and network security systems.
• Work with Incident Response teams and specialists to contain and resolve threats.
• Operate and maintain security monitoring and detection tools, improving detection quality and reducing false positives.
• Write clear security reports, incident summaries and technical findings for clients.
• Handle security tickets and keep incidents properly documented.
• Help improve SOC processes, procedures, documentation and knowledge bases.
• Work directly with clients to understand their environments and tune security monitoring.
• Keep up with emerging threats, technologies and cybersecurity best practices.

Requirements

• You have 5+ years of experience in IT, cybersecurity or security operations.
• You have hands-on SOC experience, including security alert triage and incident investigation.
• You have strong knowledge of SIEM and EDR technologies.
• You have experience with Microsoft Sentinel, Splunk, QRadar, ArcSight or ELK.
• You have experience with Microsoft security technologies, including Defender for Endpoint, Microsoft 365, Sentinel, Azure Security and XDR.
• You have a strong understanding of Azure, AWS and/or GCP.
• You have experience with at least one EDR solution, such as Microsoft Defender for Endpoint or CrowdStrike.
• You have strong knowledge of networking and TCP/IP.
• You have excellent experience analyzing security logs across Windows and Linux environments.
• You know email security, network monitoring and incident response.
• You have experience managing and processing security tickets.
• You have excellent spoken and written English.
• Plus: experience in an Incident Response team, particularly Tier I/II.
• Plus: experience monitoring AWS environments, including IaaS, PaaS and SaaS.
• Plus: scripting with Python, PowerShell, Bash, Ruby or similar.
• Plus: cybersecurity certifications such as SC-200, GCIH, CEH, GCFA, GIAC, CCNA or MCSE.
• Plus: experience working in a global, distributed SOC.

Conditions

Full-time permanent employment contract or contractor arrangement.

Remote work from Spain or any other European country.

The company is committed to non-discrimination based on gender, race, ideology or any other reason, in line with its Equality Plan and Royal Decree-Law 6/2019 on gender equality.

Benefits

• Professional growth and learning opportunities.
• Multicultural team in an international environment.
• Private medical insurance, life insurance, lunch and transport card within the flexible remuneration pack, and online language classes.
• Smart Office Pack.