Cyber Defense Ops Associate — Remote Fridays, Equity

iCapital; Lisboa; Hybrid; EUR 40,000 - 65,000; Full time

Benefits offered by this job

Competitive salary package

Healthcare (employer-paid)

Paid time off

Job summary

iCapital is looking to hire a Cyber Security Operations Associate to join the Information Security team. This role acts as a first responder for reviewing and responding to cyber security alerts, working with the security engineering team to detect, contain and resolve threats using SIEM, IDS/IPS, DLP and AWS.

The role requires 3–4 years of security experience, a Bachelor’s degree, knowledge of MITRE ATT&CK, TCP/IP, Linux/Windows/macOS, and strong communication skills.

Qualifications

• 3–4 years security-related experience or in a similar field
• Bachelor’s degree in information security, information technology or computer science preferred
• Experience in Splunk or other SIEM; Search and analysis, log aggregation etc.
• Basic understanding of Agile Frameworks
• Knowledge of common cyber threats, attack vectors, and security frameworks (NIST, MITRE ATT&CK)
• Good understanding of TCP/IP protocols
• Knowledge of Linux, Windows and macOS operating systems
• Experience with cloud infrastructure systems like AWS is preferred
• Fast learner with desire to always learn combined with the ability to multi-task
• Attentive, organized, and detail-oriented
• Solid problem-solving and analytical skills
• Excellent communication skills

Responsibilities

• Monitor and respond to security events and alerts from a variety of signals.
• Triage incidents quickly and effectively, escalating priorities to the appropriate business units.
• Perform routine tasks to measure and report on the state of cyber security defenses at the company.
• Develop and curate security detections through the security technology stack.
• Take charge of responding to and remediating cyber security intrusions.
• Compile and maintain detailed incident response reports.
• Assist in developing and updating security procedures, playbooks, and knowledge bases.
• Conduct open-source threat intelligence research to seek out and investigate new indicators of compromise for application.

Skills

Cyber security operations

Incident response

SIEM

Cloud security

Threat intelligence

Education

Bachelor's degree in information security/IT/CS

Tools

Splunk

AWS

IDS/IPS

Firewall

Job description

iCapital is looking to hire a Cyber Security Operations Associate to join the Information Security team. This role acts as a first responder for reviewing and responding to cyber security alerts, working with the security engineering team to detect, contain and resolve threats using SIEM, IDS/IPS, DLP and AWS.

The role requires 3–4 years of security experience, a Bachelor’s degree, knowledge of MITRE ATT&CK, TCP/IP, Linux/Windows/macOS, and strong communication skills.