Cybersecurity Operations Specialist- Junior

Vector Synergy; Vega del Codorno; Presencial; EUR 45.000 - 65.000; Jornada completa

Descripción de la vacante

Vector Synergy is seeking an experienced Security Operations professional to support protection, monitoring, and defense of the organization’s technology infrastructure and data assets.

Responsibilities include operating Splunk SIEM, Trellix EDR, Nessus, and Nexus to detect, analyse, and respond to cyber threats, participate in incident response, and contribute to compliance activities under ISO 27001, NIST CSF, and GDPR.

Formación

• Bachelor’s degree in a related field.
• Three years’ experience in Cybersecurity Operations, SOC Analysis, or Incident Response.
• Experience with Trellix Endpoint Security / ePO, Splunk SIEM, Tenable Nessus, and Sonatype Nexus.
• Strong threat detection, incident handling, and vulnerability management.

Responsabilidades

• Monitor security events using Splunk SIEM and correlate data from endpoints, networks, and vulnerabilities.
• Operate Trellix Endpoint Security and EDR to identify, contain, and remediate threats.
• Run Tenable Nessus scans and coordinate remediation with IT teams.
• Manage secure software with Sonatype Nexus and secure DevSecOps pipelines.
• Participate in incident response: detection, triage, containment, eradication, recovery.
• Develop Splunk detection rules, dashboards, and alerts aligned to MITRE ATT&CK.
• Document security events, maintain SOC playbooks, and support audits (ISO 27001, NIST CSF, GDPR).
• Provide situational reports and communicate risk to management.
• Suggest new use cases and improve SOC detection coverage.

Conocimientos

Cybersecurity operations

SOC analysis

Incident response

Threat detection

Vulnerability management

Log analysis

MITRE ATT&CK

NIST 800-61

ISO 27035

Analytical skills

Educación

Bachelor’s degree in Computer Science, Information Security, Engineering, or a related field

Herramientas

Trellix Endpoint Security

Splunk SIEM

Tenable Nessus

Sonatype Nexus

Descripción del empleo

The successful candidate will support the protection, monitoring, and defense of the organization’s technology infrastructure and data assets. They will operate and optimize security tools such as Trellix EDR, Splunk SIEM, Sonatype Nexus, and Tenable Nessus to detect, analyse, and respond to cyber threats.

Location: La Spezia, Italy. Security Clearance: NATO Secret. Reference No: VS/CMRE-39 / La Spezia. Deadline For Application: 25 May 2026.

Responsibilities

• Monitoring and analysing security events through Splunk SIEM, correlating data from endpoints, network, and vulnerability systems.
• Operating Trellix Endpoint Security and EDR to identify, contain, and remediate endpoint threats and suspicious activities.
• Supporting the vulnerability management process by running and reviewing Tenable Nessus scans and coordinating remediation with IT teams.
• Ensuring secure software management practices through Sonatype Nexus, identifying vulnerable dependencies, and supporting secure DevSecOps pipelines.
• Participating in incident response activities including detection, triage, containment, eradication, and recovery.
• Developing and maintaining Splunk detection rules, dashboards, and automated alerts aligned with the MITRE ATT&CK framework.
• Documenting security events, maintaining SOC playbooks, and supporting internal and external compliance audits (ISO 27001, NIST CSF, GDPR).
• Providing situational awareness reports and communicating risk insights to management and stakeholders.
• Contributing to the continuous improvement of the Security Operations Center (SOC) by proposing new use cases and optimizing detection coverage.

Required Skills & Qualifications

• Bachelor’s degree in Computer Science, Information Security, Engineering, or a related field.
• Three years’ experience in Cybersecurity Operations, SOC Analysis, or Incident Response roles.
• Demonstrated experience with:
  • Trellix Endpoint Security / ePO.
  • Splunk SIEM.
  • Tenable Nessus.
  • Sonatype Nexus.
• Strong understanding of threat detection, incident handling, and vulnerability management processes.
• Familiarity with network protocols (TCP/IP, DNS, HTTP/S, SMTP) and log analysis techniques.
• Knowledge of MITRE ATT&CK, NIST 800-61, and ISO 27035 security incident frameworks.
• Ability to manage multiple incidents or investigations in a fast‑paced operational environment.
• Excellent analytical, troubleshooting, and reporting skills.

Desirable

• Master’s degree in Cybersecurity, Computer Science, or Information Technology.
• Professional certifications such as GCIA, GCIH, Splunk Certified Power User, Trellix Certified Specialist, or Tenable Certified Practitioner.
• Experience developing detection logic, correlation searches, or automation workflows in Splunk or SOAR platforms.
• Knowledge of scripting languages such as Python, PowerShell, or Bash for automation and data enrichment.
• Exposure to DevSecOps practices and secure software development lifecycle (SDLC) integration using tools like Sonatype Nexus.
• Familiarity with threat intelligence platforms (TIPs) and integration of IOCs into SIEM systems.
• Database knowledge (SQL / NoSQL) for data correlation or threat hunting.
• Strong written and verbal communication skills, capable of documenting incidents and presenting findings to technical and non‑technical audiences.
• Ability to work effectively in a SOC team environment or independently during critical response operations.
• Commitment to continuous learning and staying current with emerging cyber threats, vulnerabilities, and technologies.