3 hours ago
We are looking for a motivated Security Operations Analyst to join our dynamic and high-caliber team.
Τhe Role
Reporting to the CISO and collaborating with our 24/7 MDR provider, you will lead incident response, email threat response, vulnerability management, threat hunting and intelligence across cloud, on-premises and corporate environments. Working closely with Security Operations Engineers, you will contribute to daily triage, on-call rotations, and purple and red team exercises while expanding your expertise across security operations.
Your contribution to the success of the team
Lead the investigation of security incidents and MDR escalations, from triage through forensic investigation and root cause analysis to coordinated remediation
Take part in daily triage and a rotating on-call roster, acting as the internal escalation point for our MDR provider and carrying out containment actions such as host isolation and account disablement
Own the response to email and collaboration threats, including phishing and business email compromise
Own our vulnerability management process, consolidating findings from multiple sources and prioritizing them on a risk basis with our Application Security and Security Engineers
Own threat intelligence, correlating intelligence from multiple providers and assessing its relevance to our business
Lead threat hunting and turn what you find into new or improved detections
Develop and tune detection rules with our Security Operations Engineers and MDR provider, so that every alert is worth investigating
Maintain our incident response playbooks and on-call runbooks, and help improve our incident response capability
Take part in purple and red team exercises, and turn the findings into better detection and response
Contribute to security operations reporting on a rotating basis, explaining trends and proposing improvements
Your Qualifications & Competencies
5+ years of experience in Information Security, including 3+ years as a security analyst or penetration tester
Hands-on experience with SIEM and EDR/XDR platforms such as Microsoft Sentinel and Defender XDR, including writing KQL queries and tuning detection rules
Experience investigating email threats with platforms such as Microsoft Defender for Office 365 or Check Point Harmony Email & Collaboration
Practical incident response experience, including forensic investigation and root cause analysis
Working knowledge of MITRE ATT&CK and of current adversary tactics, techniques and procedures
Hands-on experience with vulnerability management tools, and working knowledge of prioritization methods such as CVSS, EPSS and CISA KEV
A solid understanding of cloud infrastructure and services, Azure in particular
Scripting skills for investigation and automation (e.g. PowerShell, Python)
Willingness and availability to take part in a rotating on-call roster
A BSc or postgraduate degree in Computer Science, Cyber Security or a related field
Excellent written and spoken English is required.
Professional certifications such as BTL1/BTL2, TryHackMe SAL1/SAL2, Microsoft SC-200, HTB CDSA, CompTIA CySA+ or GCIH are considered a plus
Malware analysis fundamentals and experience of purple team exercises are considered a plus
Practical experience working with AI tools is a strong advantage, as our Security team operates in an AI-first environment and uses AI extensively in day-to-day work
💰Competitive remuneration package
❤️Private health insurance plan
🏠Hybrid working model
💯Opportunity to work alongside people who are always eager to mentor
🚍Transportation with company’s bus from central stations
📖 Funded training & development opportunities
🥪Catering food services
In accordance with the EU Pay Transparency Directive (EU) 2023/970, compensation details for this position will be communicated to candidates by our Talent team at an appropriate stage prior to the interview process.