Cyber Security Analyst

Connext; Colombia; Presencial; COP 60.000.000 - 90.000.000; Jornada completa

Descripción de la vacante

Connext is seeking a Cyber Security Analyst to build a foundation across MSS technologies and protect customer networks from cyber threats. You will monitor networks, servers, databases, and endpoints for indicators of compromise and configure security devices such as firewalls and VPNs.

You will respond to SIEM alerts, investigate incidents, and work with customers to remediate vulnerabilities while staying current on IT security trends and best practices.

Formación

• Strong understanding of cybersecurity principles, network security, threat detection, and incident response.
• Ability to demonstrate an understanding of IP protocols like DHCP, FTP/SFTP, HTTPS/HTTPS, TCP/UDP, SSH etc.
• Proficiency in Cybersecurity frameworks, including MITRE ATT&CK, NIST, and Lockheed Martin, with ability to apply these in real-world scenarios for threat detection and mitigation.
• Strong problem-solving and analytical skills are essential for investigating security incidents and vulnerabilities.
• Previos experience working with SIEM platforms such as QRadar, Splunk or AlienVault.

Responsabilidades

• Monitor the MSS helpdesk and react to new and existing tickets at a 1st line/Tier 1 level.
• Tackle all MSS tickets regardless of the technology stream the ticket focuses on.
• Respond to Security Incident and Event Management (SIEM) platform alerts by investigating and analyzing potential security breaches and cyber security incidents.
• Investigate monitoring alerts for network devices such as an interface up/down and alerting the customer appropriately.
• Monitor customer environments for security/network issues.
• Manage, monitor, and alert customer equipment.
• Install security measures and operate software to protect systems and information infrastructure, including firewalls and data encryption programs.
• Document and research security breaches and assess the damage they cause.
• Work with customers security team to perform tests and uncover network vulnerabilities.
• Help remediate detected vulnerabilities to maintain a high-security standard.
• Become current on IT security trends and news.
• Adhere to company-wide best practices for IT security.
• Research security enhancements and make recommendations to management.

Conocimientos

Cybersecurity fundamentals

Network security

Threat detection

Incident response

IP protocols

SIEM familiarity

Security analytics

Herramientas

QRadar

Splunk

AlienVault

Descripción del empleo

The Cyber Security Analyst will build a foundation across all aspects of MSS technologies. This role will help protect our customer networks against cybersecurity threats such as hackers, Cyber-terrorists and malware that can steal or corrupt sensitive customer data. This is accomplished by monitoring and analyzing customer networks, servers, databases and end-point equipment for key indicators of compromise and configuring customer networks and security devices such as switches, routers, wireless, firewalls and virtual private networks (VPNs).

Job Description

• Monitor the MSS helpdesk and react to new and existing tickets at a 1st line/Tier 1 level.
• Tackle all MSS tickets regardless of the technology stream the ticket focuses on.
• Respond to Security Incident and Event Management (SIEM) platform alerts by investigating and analyzing potential security breaches and cyber security incidents.
• Investigate monitoring alerts for network devices such as an interface up/down and alerting the customer appropriately.
• Monitor customer environments for security/network issues.
• Manage, monitor, and alert customer equipment.
• Install security measures and operate software to protect systems and information infrastructure, including firewalls and data encryption programs.
• Document and research security breaches and assess the damage they cause.
• Work with customers security team to perform tests and uncover network vulnerabilities.
• Help remediate detected vulnerabilities to maintain a high-security standard.
• Become current on IT security trends and news.
• Adhere to company-wide best practices for IT security.
• Research security enhancements and make recommendations to management.

Required Qualifications

• Strong understanding of cybersecurity principles, network security, threat detection, and incident response.
• Ability to demonstrate an understanding of IP protocols like DHCP, FTP/SFTP, HTTPS/HTTPS, TCP/UDP, SSH etc.
• Proficiency in Cybersecurity frameworks, including but not limited to Mitre Att&ck, NIST (National Institute of Standards and Technology), and Lockhead Martin, with an ability to apply these frameworks in real-world scenarios for threat detection and mitigation.
• Strong problem-solving and analytical skills are essential for investigating security incidents and vulnerabilities.
• Previos experience working with SIEM platforms such as QRadar, Splunk or AlienVault etc.