Hybrid Cyber Security Operations Associate — Equity & PTO

iCapital Network, Inc.; Lisboa; Hybrid; EUR 45,000 - 65,000; Full time

Benefits offered by this job

Health insurance

Equity for employees

Generous PTO

Job summary

iCapital Network, Inc. is seeking a Cyber Security Operations Associate to join the Information Security team.

As a first responder, you will review and respond to security alerts and work with the security engineering team to detect, contain, and resolve threats using SIEM, IDS/IPS, DLP, and cloud technologies including AWS. You will monitor events, triage incidents, and develop detections while maintaining incident reports and security playbooks.

Qualifications

• Bachelor's degree in information security, information technology or computer science preferred.
• Experience with security monitoring tools and incident response processes.
• Familiarity with NIST or MITRE ATT&CK frameworks.
• Knowledge of TCP/IP, Linux, Windows and macOS.
• Experience with cloud infrastructure systems like AWS is preferred.

Responsibilities

• Monitor and respond to security events and alerts from a variety of signals.
• Triage incidents quickly and escalate priorities as needed.
• Develop and curate security detections through the security technology stack.
• Respond to and remediate cyber security intrusions; compile incident reports.
• Assist in developing security procedures, playbooks, and knowledge bases.
• Conduct threat intelligence research to investigate indicators of compromise.

Skills

Cybersecurity knowledge

Analytical skills

Multi-tasking

Detail-oriented

Fast learner

Problem-solving

Education

Bachelor's degree in information security or related field

Tools

Splunk

SIEM

AWS

IDS/IPS

DLP

Job description

iCapital Network, Inc. is seeking a Cyber Security Operations Associate to join the Information Security team.

As a first responder, you will review and respond to security alerts and work with the security engineering team to detect, contain, and resolve threats using SIEM, IDS/IPS, DLP, and cloud technologies including AWS. You will monitor events, triage incidents, and develop detections while maintaining incident reports and security playbooks.