Cybersecurity Technology Analyst

ALTEN Polska; Kraków; Hybrid; PLN 60,000 - 90,000; Full time

Benefits offered by this job

Work equipment provided

Training and conferences

Job summary

ALTEN Polska is seeking a Security Analyst to support technical operations across Endpoint Security, Data Security, Network Security, Application Security and SIEM/SOAR. You will administer security tools, analyze incidents, and automate tasks using scripting languages.

The role operates in a hybrid Kraków environment with weekend on-call rotations. You will work with Unix/Windows, AWS, and various security technologies, contributing to continual service improvement and ITIL-aligned processes.

Qualifications

• Experience with at least 2+ tools in one or more areas is MUST.
• Endpoint security (EDR like McAfee ENS/CrowdStrike) is required.
• Network security (ISE/NAC, web proxy) experience is required.
• Application security (Nessus/Tenable, container security) knowledge is needed.
• Data security (DLP technologies such as Symantec or McAfee DLP) exposure is a plus.
• SIEM/SOAR (Splunk ES, Splunk SOAR) familiarity is a MUST.
• Unix & Windows operating systems familiarity is a MUST.
• AWS experience (Compute/Storage/Networking) is nice to have.
• Scripting (Perl/PowerShell/Python) is desired.

Responsibilities

• Serve as Security Analyst supporting technical operations for critical cybersecurity technologies.
• Provide end to end administration and production support for cybersecurity tools under Endpoint Security, Data Security, Network Security, Application Security and SIEM/SOAR.
• Analyze, investigate, remediate cybersecurity application incidents in operational/production environment.
• Automate repeated and operational tasks through programming (Perl, Python, PHP, Bash, or PowerShell) or other interfaces.
• Setup monitoring and event management for cyber security products to help manage availability, reliability, and performance.
• Perform cybersecurity application installation, upgrades, product hygiene and maintenance.
• Operate in accordance with ITIL processes such as Change Management, Incident Management and Problem Management.
• Lead product support transitions on both technical and process front.
• Identify operational gaps and drive continual service improvement plans for existing processes.
• Build tool knowledgebase and establish/enhance SOPs.
• Work with minimal supervision and collaborate with Cyber Security and other LOBs.
• Develop and produce operational metrics such as Change success rate, tool uptime report, Incident ticket volume.
• Role requires weekend support on rotation via on-call.

Skills

Communication skills

Analytical thinking

Ownership & responsibility

Problem solving

Tools

McAfee ENS

CrowdStrike

Nessus/Tenable

Docker security

ISE/NAC

Web proxy

Splunk ES

Splunk SOAR

Unix/Windows

AWS (Compute/Storage/Networking)

Job description

Why us?

We are part of the ALTEN Group – a leading European provider of engineering and technology consulting servics. Join ALTEN Polska and let’s grow together!

Location: Kraków- hybrid work (6 x month)

Key Responsibilities

• Serve as Security Analyst supporting technical operations for critical cybersecurity technologies.
• Provide end to end administration and production support for cybersecurity tools under Endpoint Security, Data Security, Network Security, Application Security and SIEM/SOAR.
• Analyze, investigate, remediate cybersecurity application incidents in operational/production environment.
• Automate repeated and operational tasks through programming (Perl, Python, PHP, Bash, or PowerShell) or other interfaces.
• Setup monitoring and event management for cyber security products to help manage availability, reliability, and performance.
• Perform cybersecurity application installation, upgrades, product hygiene and maintenance.
• Operate in accordance with ITIL processes such as Change Management process, Incident Management and Problem Management.
• Lead product support transitions on both technical and process front.
• Identify operational gaps and drive continual service improvement plans for existing processes.
• Build tool knowledgebase and establish/enhance Standard Operation Procedures (SOP)
• Work with minimal supervision and conduct activities as a collaborative partner to Cyber Security as well as other lines of business (LOBs)
• Develop and produce operational metrics such as Change success rate, tool uptime report, Incident ticket volume etc.
• The role demands weekend support on rotation through active/passive on calls.

Required Skills

• Relevant experience in tool administration and support of at least 2 + tools in one or more areas is MUST
• Endpoint security (McAfee ENS, CrowdStrike or any EDR solution)
• Network security (ISE/NAC solutions, Network segmentation, Web proxy solutions)
• Application security (Nessus/Tenable, Container/Docker security.)
• Data Security (Industry leading DLP technology such as Symantec or MacAfee DLP)
• SIEM/SOAR (Splunk ES, Splunk SOAR)
• Familiarity with Unix & Windows operating system is a MUST.
• Experience working on Amazon web services (Compute, Storage and Networking) is nice to have.
• Experience with any one of the script languages such as Perl/PowerShell/Python is desired.
• Must possess clear oral and written communication skills and be able to clearly articulate complex concepts to broader audience.
• Excellent analytical and problem-solving skills – ability to get to the root of the problem, assess impact, and develop a resolution plan quickly, leveraging all available resources, is essential.
• Must take ownership of tasks and demonstrate high degree of responsibility to ensure completion.

We offer

• A full-time contract (B2B also possible)
• All necessary work equipment is provided by us (computer, monitor etc).
• Participation in company many conferences, trainings, workshops, integration meetings, etc.
• Certification and training opportunities

Certification and training opportunities

• Opportunity to relocate and work in different ALTEN Polska branches
• After completion of the project, opportunity to engage in a subsequent one within the company.
• Work in company with #GreatPlaceToWork Certificate

Benefits

• Access to professional certifications with our technology partners (e.g. Google, ISTQB)
• Access to relevant industry events
• Access to the Knowledge Sharing Program
• Access to Referral program
• Work Equipment
• Layette for a newborn employee’s child
• Group life insurance
• Pension scheme