Cyber Security Analyst(Remote)

TechBiz Global GmbH; Polska; Hybrid; PLN 120,000 - 180,000; Full time

Benefits offered by this job

20 days vacation

5 days sick leave

17 national holidays

Teleworking allowance 400 USD/month

Public healthcare

Job summary

TechBiz Global seeks a Cyber Security Analyst to join our clients' teams. You will provide managed security services and work within the Optimization Engineering & Analytics group to protect resources from cyber threats.

Requirements include 4+ years IT and 3+ years security experience, strong knowledge of endpoint protection, SIEM, and scripting. You will monitor, detect, and respond to security incidents and help build automated playbooks.

Qualifications

• 4+ years IT experience with cyber security.
• Experience across endpoint protection and threat management.
• Knowledge of TCP/IP, DNS, HTTP protocols and malware threats.
• Excellent analytical and collaboration skills.
• Bachelor’s degree in a related field preferred.

Responsibilities

• Provide client-facing managed security services.
• Monitor real-time security events and respond to incidents.
• Deploy and manage endpoint security solutions.
• Develop and run automated security playbooks.
• Coordinate with clients and internal teams to improve SOC processes.

Skills

Cyber security

Network security

Scripting

Incident response

Threat intelligence

Education

Bachelor’s Degree in CS/Engineering/Math

Tools

Trellix ePO

CrowdStrike

Microsoft Defender

SIEM (Splunk/LogScale/Azure Sentinel)

Job description

At TechBiz Global, we are providing recruitment service to our portfolio. We are currently seeking a Cyber Security Analyst to join one of our clients' teams. If you're looking for an exciting opportunity to grow in a innovative environment, this could be the perfect fit for you. We are seeking an enthusiastic and motivated individual to provide Managed Cyber Security Services to our valued customers. As a key member of the Optimization Engineering & Analytics team, you will be part of an integral and group that is dedicated to protecting system resources from cyber-attacks and other online threats that could have devastating consequences for millions of end users.
Successful candidates will demonstrate foundational Network Security and System Administration with advanced understanding across Endpoint Protection, Threat and Vulnerability Management, Security Automation, and Security Analysis.

KEY RESPONSIBILITIES

• Provide client-facing support of our managed security services, including adherence and development of processes and operational frameworks.
• Ability to work assigned shift, covering alternate shifts as needed.
• Analyze, esc... and assist in the remediation of critical information security incidents.
• Assist with the integration, deployment, on-boarding and management of endpoint defense and attack surface managed customers.
• Perform real-time alert monitoring and analyze security event data from network and endpoint environments, peer analysts, customer platforms, and other data sources.
• Provide Incident Response (IR) support and assist customers remediation guidance.
• Review procedures relating to Cyber threat intelligence, monitoring, incident response, attack surface reduction, and design automated actions to accelerate the triage, validation, eradication, and remediation of security incidents.
• Leverage expertise in leading security operations tools and industry standard scripting languages to effectively write playbooks in security orchestration, automation, and response.
• Collaborate with team members to create, maintain, and manage a library of automated playbooks for common information security threats and customize these plans for client specific environments.
• Actively identify areas of improvement within the processes of the Security Operations Center and Cyber Incident Response with the goal of decreasing response times, increasing effectiveness, eliminating waste, and streamlining security operations.
• Integrate new security platform functionality with existing systems and automated processes as threats and controls evolve.
• Create well documented and clearly articulated code/ scripts, process, and service documentation.
• Perform health checks and optimization activities on client security technologies or systems.
• Determine information security risk and facilitate remediation actions of identified vulnerabilities and security risk across the enterprise.
• Other, as needed.

MINIMUM QUALIFICATIONS

• 4+ years of IT experience.
• 3+ years of Cyber Security experience.
• Advanced operating systems experience, in 2 or more of the following, Microsoft, MacOS, Linux.
• General network security and troubleshooting knowledge.
• Foundational scripting knowledge preferred in any of the following: PowerShell, Python, Bash.
• In-depth knowledge of TCP/IP, UDP, DNS, FTP, SSH, SSL/TLS, and HTTP Protocols, network analysis, and network/security applications.
• Good knowledge of common malware threats and attack methodologies.
• Passionate about emerging threats and security tools/technologies.
• Malware and Threat analysis.
• Incident Management.
• Able to work under general to minimal supervision.

PREFERRED QUALIFICATIONS

• 3+ years of experience with endpoint security tools (Trellix ePO, Trellix ENS, Trellix EDR, Trellix HX, CrowdStrike, Microsoft Defender, Microsoft ATP, SentinelOne).
• 3+ years managing security endpoints.
• 3+ years of experience with SIEM management and tuning in one or more of the following: LogScale formerly Humio, Splunk, Trellix Helix, Trellix ESM, Azure Sentinel, Elastic SIEM, Chronical, or Devo.
• Experience with Windows patch management tools (Automox, SCCM, SolarWinds, GFI Languard, etc.) a plus.
• Experience creating detection rules in a one ore more SIEM technologies
• Certifications a plus: CEH, CRISC, CISA, CGEIT, CISSP, CIPP, GMON, GHIA, GCIH.
• Bachelor’s Degree (Math, CS, and Engineering), preferred.
• Excellent knowledge of security methodologies, processes (i.e., Cyber Kill Chain/Diamond Models, and the MITRE ATT&CK framework).

• Benefits package:
  • 20 days of vacation
  • 5 days of employer-paid sick leave (there are additional sick leave benefits beyond that are paid for by the National Health Insurance House)
  • 17 national holidays
  • employees receive $400/month RON teleworking allowance
  • Public healthcare, public pension, unemployment
• In addition to the statutory public healthcare, we provide Allianz medical upgrade for the employee-only
• Contract type and contract duration - will be an EOR (Employee of Record) of Deel.