Cyber Security Operations - Associate New Lisbon, Portugal

iCapital Network, Inc.; Lisboa; Hybrid; EUR 45,000 - 65,000; Full time

Benefits offered by this job

Health insurance

Equity for employees

Generous PTO

Job summary

iCapital Network, Inc. is seeking a Cyber Security Operations Associate to join the Information Security team.

As a first responder, you will review and respond to security alerts and work with the security engineering team to detect, contain, and resolve threats using SIEM, IDS/IPS, DLP, and cloud technologies including AWS. You will monitor events, triage incidents, and develop detections while maintaining incident reports and security playbooks.

Qualifications

• Bachelor's degree in information security, information technology or computer science preferred.
• Experience with security monitoring tools and incident response processes.
• Familiarity with NIST or MITRE ATT&CK frameworks.
• Knowledge of TCP/IP, Linux, Windows and macOS.
• Experience with cloud infrastructure systems like AWS is preferred.

Responsibilities

• Monitor and respond to security events and alerts from a variety of signals.
• Triage incidents quickly and escalate priorities as needed.
• Develop and curate security detections through the security technology stack.
• Respond to and remediate cyber security intrusions; compile incident reports.
• Assist in developing security procedures, playbooks, and knowledge bases.
• Conduct threat intelligence research to investigate indicators of compromise.

Skills

Cybersecurity knowledge

Analytical skills

Multi-tasking

Detail-oriented

Fast learner

Problem-solving

Education

Bachelor's degree in information security or related field

Tools

Splunk

SIEM

AWS

IDS/IPS

DLP

Job description

iCapital is looking to hire a Cyber Security Operations Associate to join the Information Security team. This role is a first responder for reviewing and responding to cyber security alerts.The Associate will work alongside the security engineering team to provide situational awareness through detecting, containing and resolving cyber security threats using a comprehensive set of cyber security technologies including IDS, IPS, DLP, SIEM, AWS and firewall technologies.

Responsibilities

• Monitor and respond to security events and alerts from a variety of signals.
• Triage incidents quickly and effectively, escalating priorities to the appropriate business units.
• Perform routine tasks to measure and report on the state of cyber security defenses at the company.
• Develop and curate security detections through the security technology stack.
• Take charge of responding to and remediating cyber security intrusions.
• Compile and maintain detailed incident response reports.
• Assist in developing and updating security procedures, playbooks, and knowledge bases.
• Conduct open-source threat intelligence research to seek out and investigate new indicators of compromise for application.

Qualifications

• 2-4 years security related experience or in a similar field
• Bachelor’s degree in information security, information technology or computer science preferred
• Experience in Splunk or other SIEM; Search and analysis, log aggregation etc.
• Basic understanding of Agile Frameworks
• Knowledge of common cyber threats, attack vectors, and security frameworks (NIST, MITRE ATT&CK)
• Good understanding of TCP/IP protocols
• Knowledge of Linux, Windows and macOS operating systems
• Experience with cloud infrastructure systems like AWS is preferred
• Fast learner with desire to always learn combined with the ability to multi-task
• Attentive, organized, and detail-oriented
• Solid problem-solving and analytical skills

We believe the best ideas and innovation happen when we are together. Employees in this role will work in the office four days, with the flexibility to work remotely one day (Friday).

Benefits

• competitive salary, annual performance bonus, and equity for all full-time employees
• healthcare with 100% employer-paid health and dental insurance
• generous paid time off (PTO)