Senior Cybersecurity Operations Analyst

Kruger Inc.; Medellín; Presencial; COP 120.000.000 - 180.000.000; Jornada completa

Descripción de la vacante

Kruger Inc. is seeking a Senior Cybersecurity Operations Analyst to lead incident response, threat monitoring, and vulnerability management across IT, OT, and cloud environments.

You will drive risk-based recommendations to stakeholders, optimize security playbooks, and align operations with compliance requirements and business risk appetite. Excellent communication and leadership are essential for cross-functional collaboration.

Formación

• Bachelor's degree in computer science, information security, or a related field.
• Advanced industry certifications are strongly preferred (CISSP, CISM, GIAC, AZ-900/AZ-500 or similar).
• Seven+ years in cybersecurity operations, including incident response and vulnerability management.

Responsabilidades

• Lead analysis and resolution of complex cybersecurity incidents and service requests.
• Conduct investigations, root cause analyses, and post-incident recommendations.
• Support monitoring platforms for detection, endpoint protection, vulnerability management, and data protection.
• Translate security findings into risk-based recommendations for IT and business stakeholders.
• Identify, assess, and prioritize vulnerabilities across IT, OT, cloud, and endpoints.
• Coordinate remediation with technical and business teams and track KPI improvements.

Conocimientos

SIEM

EDR

Firewalls

DLP

Vulnerability management

MITRE ATT&CK

Cloud security

Forensics

Windows

Linux

Educación

Bachelor's degree in computer science or information security

CISSP/CISM/GIAC or cloud security certs

Herramientas

SIEM

EDR

Firewalls

DLP

Descripción del empleo

Reporting to the Manager, Cybersecurity Operations, the Senior Cybersecurity Operations Analyst is a key technical leader who supports cybersecurity operations, including incident response, threat monitoring, vulnerability management, operational process optimization, and risk-based guidance for IT and business stakeholders.

Beyond day-to-day operations, this role provides strategic input into security roadmap decisions and the development of operational playbooks and processes. The role also ensures that operational security practices align with business risks and compliance requirements.

RESPONSIBILITIES

Security Incident and Service Request Management

• Lead the analysis and resolution of complex cybersecurity incidents and service requests.
• Conduct technical investigations and root cause analyses, and develop post-incident recommendations.

Monitoring and Event Analysis

• Support and optimize cybersecurity platforms used for monitoring, detection, endpoint protection, vulnerability management, and data protection.
• Analyze security events, logs, vulnerability data, and anomalies to identify threats and risk exposure.
• Translate technical findings into risk-based recommendations for IT and business stakeholders.

Vulnerability and Risk Exposure Management

• Identify, assess, and prioritize vulnerabilities across IT, OT, cloud, and endpoint environments.
• Coordinate remediation follow-ups with technical and business teams based on risk and asset criticality.
• Track vulnerability KPIs, exceptions, risk acceptance decisions, and improvements to remediation processes.
• Support cloud security posture management by assessing misconfigurations, identity risks, and exposure across cloud services.

Operational Process and Playbook Optimization

• Maintain and improve incident response playbooks, operational procedures, and security processes.
• Support operational readiness through exercises, testing, and alignment with industry standards and compliance frameworks.
• Provide guidance on integrating security controls into IT and OT environments.

Cross-Functional Contributions

• Act as a cybersecurity subject matter expert and support IT teams, projects, audits, and risk assessments.
• Contribute to the security roadmap, technology evaluations, and security maturity improvements.
• Support security awareness, stakeholder engagement, and after-hours response to high-severity incidents.

QUALIFICATIONS

ACADEMIC

• Bachelor's degree in computer science, information security, or a related field.
• Advanced industry certifications are strongly preferred, including CISSP, CISM, GIAC (GCIA, GCFA, or equivalent), Microsoft Azure Fundamentals (AZ-900), Microsoft Azure Security Engineer Associate (AZ-500), or other relevant cloud security certifications such as CCSP, AWS Certified Security - Specialty, or Google Professional Cloud Security Engineer.

EXPERIENCE

• Seven (7) years or more of experience in cybersecurity.
• Demonstrated experience supporting cybersecurity operations, including incident response, vulnerability management, security monitoring, and continuous improvement of security processes.

SKILLS AND ABILITIES

Technical Skills

• Advanced expertise with security monitoring and analysis tools, including SIEM, EDR, firewalls, and DLP solutions.
• Strong knowledge of vulnerability and exposure management practices, including CVSS, exploitability, asset criticality, remediation service levels, compensating controls, exceptions, and risk acceptance workflows.
• Hands-on experience with digital forensics, malware analysis, and advanced investigation techniques.
• Strong knowledge of network protocols, Windows and Linux operating systems, and enterprise applications.
• Strong knowledge of cloud security principles, including identity and access management, secure configuration, logging, and cloud security posture management.
• Solid understanding of attack vectors, adversary tactics described in MITRE ATT&CK, and defensive strategies.
• Familiarity with security architecture, asset classification, and risk management frameworks.
• Ability to correlate vulnerabilities with asset criticality, threat intelligence, and business impact.

Non-Technical Skills

• Demonstrated ability to lead during high-severity incidents and drive a coordinated response.
• Strong communication skills with executives, technical teams, and non-technical stakeholders.
• Ability to mentor and coach colleagues outside the security function, fostering awareness and a strong security culture.
• Analytical and decisive, with the ability to translate technical risks into business impacts.
• Resilient under pressure and committed to organizational success.
• Results-oriented and committed to team success.

LANGUAGES

• Fluent in English, both spoken and written, with the ability to produce professional technical documentation and communicate effectively with stakeholders at all levels.