Senior Security Analyst at Camlin Group Ltd

Camlin Group Ltd; Málaga; Presencial; EUR 60.000 - 90.000; Jornada completa

Descripción de la vacante

Camlin Group Ltd in Málaga, AN, ES seeks a Senior Security Analyst to join its Security Team on a full-time on-site basis. The role oversees vulnerability management, threat intelligence, and security monitoring to protect customer and corporate environments.

You will lead a team, work with DevSecOps and IT, and drive improvements using MITRE-based methodologies. Strong AWS security experience and scripting skills are essential. Join a growing global technology company with broad R&D interests.

Formación

• At least 5 years of practical experience leading a team of security analysts.
• Working knowledge of native AWS Security Toolchain (Security Hub, Inspector, GuardDuty) and Datadog.
• AWS Cloud Fundamentals and/or AWS Security Specialty certifications or equivalent.
• Ability to operate in a fast-paced, global security operations environment.
• Attention to detail, able to handle pressure and shifting priorities.
• Proven ability to work independently with guidance from the Information Security Manager.
• Experience with Threat Landscape, Threat Hunting, Adversary Methodologies, Cyber Defence and MITRE framework.
• Lead role in NSOC/Threat Analyst, with capability to create new operational guidelines.
• Scripting in Python to support OS, files, and security operations.
• Good knowledge of Linux/Windows vulnerabilities and third-party library risks.
• Nice to have: ISO 27001/ GDPR knowledge; network/switch/firewall management.

Responsabilidades

• Ensure monitoring and response plans for customer (AWS) environments to manage incidents and threats.
• Lead vulnerability management to detect, escalate, and remediate for customer and corporate envs.
• Lead the Threat Intelligence process and report to key stakeholders.
• Collaborate with Engineering, DevSecOps, Software, and IT to patch vulnerabilities.
• Develop processes and playbooks to improve vulnerability management efficiency.
• Analyse lessons learned and document improvements for incidents and tooling.
• Define and implement the RSO roadmap and security monitoring strategy.

Conocimientos

Team leadership

Threat Hunting

MITRE ATT&CK knowledge

Python scripting

Excellent communication

Independent worker

Educación

AWS Certifications or equivalent

Herramientas

AWS Security Hub

AWS Inspector

GuardDuty

Datadog

GitHub/GitLab

Descripción del empleo

Senior Security Analyst at Camlin Group Ltd in Málaga, AN, ES. This Full time on site position offers great opportunities for career growth.

About Camlin Camlin is a global technology leader that operates with the vision of bringing revolutionary products to life for a wide range of industries, including power and rail, and also has interests in a number of R&D projects in a variety of scientific sectors. At Camlin we believe in high quality engineering and design, allowing us to develop market leading products and services. In short, we love creating value for our customers by solving difficult problems. As of now, Camlin operates in over 20 countries worldwide.

Camlin Group is looking for Information Security Professionals to join its Security Team. The successful candidate for this position will become part of an RSO (Resiliency, Security and Operations) Team. The successful candidate can expect to join a growing team and will report to the Information Security Officer. While being able to work closely with others, he or she will also need to demonstrate the ability to work independently.

What you'll do:

• Ensure proper monitoring and response plans are in place for customer (AWS) environments to enable the timely and effective response to, and management of, incidents, alarms, notifications, calls, and other activities related to the RSO and new cyber threats.
• Lead the vulnerability management process to ensure that vulnerabilities are detected, escalated, and remediated for both the customer and corporate environments.
• Lead the Threat Intelligence process, document and report out to key stakeholders.
• Work with Engineering, DevSecOps, Software and IT teams in relation to identifying and patching vulnerabilities.
• Develop processes, procedures and playbooks to improve the operational effectiveness and efficiency of the vulnerability management process.
• Analyse lessons learned and produce thorough documentation on complex incidents focussing on the improvements that can be made to processes, playbooks, and tooling.
• Define and implement the RSO roadmap and security monitoring strategy.

What you'll need:

• At least 5 years of practical experience leading a team of security analysts.
• Working knowledge of native AWS Security Toolchain e.g. AWS Security Hub, AWS Inspector, Guard Duty and Datadog.
• AWS Cloud Fundamentals and/or AWS Security Specialty certifications or equivalent.
• Can operate in a fast-paced, global security operations environment.
• Be diligent, with great attention to detail, and able to cope successfully under pressure and with shifting priorities.
• Proven ability to work independently on resolving complex issues, assisted by the Information Security Manager, IT and DevSecOps.
• Excellent experience with the Threat Landscape, Threat Hunting, Adversary Methodologies, Cyber Defence and MITRE attack framework.
• Significant previous experience working in a lead role in one of the following security areas: NSOC Analyst, Threat Analyst with the ability to create new operational guidelines, processes, and procedures.
• Able to script in python to deal with OS, files, and security operations requirements.
• Good knowledge of Linux and Windows OS vulnerabilities.
• Good knowledge of vulnerabilities in 3rd party libraries used in software development.
• Nice to have but not essential: Working knowledge of ISO 27001:2013/2022, GDPR, Cyber Essentials & Cyber Essentials Plus.
• Experience of network/switch/firewall management & configuration.
• Advanced understanding and demonstrable experience of networking principles, IT architecture and security architecture.
• Shift management: Managing shifts and team in a 24/7 SOC environment.
• GitHub or GitLab account to show previous work and tools development.

Personal Attributes:

• A good team player capable of delivering results under pressure and to strict deadlines.
• Excellent communication and documentation skills.
• Organised and willing to document and drive process and procedure.
• A positive, 'can do', enthusiastic attitude towards addressing the technical challenges facing Camlin Group.
• Conscientious individual demonstrating attention to detail along with high levels of ownership and commitment.
• Motivation to create high quality products and systems and learn new skills.

Our Values

• We work together
• We believe in people
• We won't accept the ‘way it has always been done’
• We listen to learn
• We’re trying to do the right thing

Equal Employment Opportunity Statement

Individuals seeking employment at Camlin are considered without regards to race, colour, religion, national origin, age, sex, marital states, ancestry, physical or mental disability, gender identity or sexual orientation.