Information Security Analyst

Mindera; Porto; Presencial; EUR 40 000 - 60 000; Tempo integral

Resumo da oferta

Mindera is seeking an experienced Information Security Analyst to enhance security measures across locations. The role demands at least 3 years of experience in areas like XDR threat detection, vulnerability management, and scripting. You will contribute to incident response, develop security monitoring strategies, and support a variety of stakeholders. Ideal candidates will possess solid technical skills in relevant tools, a strong communicator in English, and a proactive growth mindset. The position is based in Porto, Portugal.

Qualificações

• 3+ years of hands-on experience in relevant areas.
• Solid knowledge of Linux, macOS, and Windows operating systems.
• Understanding of security frameworks like MITRE ATT&CK, NIST, CIS.

Responsabilidades

• Develop, maintain and fine-tune detection rules.
• Run and analyze vulnerability scans, identify and report weaknesses.
• Advise and contribute to security guidelines and practices.
• Assist during incident containment and recovery.
• Automate repetitive tasks using scripts.

Conhecimentos

XDR Threat Detection/Response

Vulnerability Management

Scripting and Automation

Change management

Cloud and On-prem Infrastructure

Security Frameworks

Communication Skills

Interpersonal skills

Growth Mindset

Ferramentas

Tenable

Qualys

Python

Bash

AWS

GCP

Descrição da oferta de emprego

Overview

Mindera works with a variety of clients across the world to innovate and solve tough technical problems. Our security team enables Mindera to meet security standards, such as UK Cyber Essentials Plus and ISO 27001, and keep all Minders safe from the bad guys’ hands.

We are looking for an Information Security Analyst to work across all our locations.

As a mid-level information security analyst, you will help the team monitoring Mindera’s infrastructure, managing vulnerabilities, responding to incidents, offering advice and support to Minders.

You will also have the opportunity to contribute our procedures as well as research and integrate solutions to continually improve Mindera’s security posture.

Important note: this role primarily involves working within European time zones, requiring a significant overlap with team hours.

What you'll be up to

• Security monitoring and alerting: Develop, maintain and fine-tune detection rules for our XDR platform. Investigate security events to determine whether an incident occurred;
• Vulnerability management: Run and analyse vulnerability scans, identify weaknesses, report results and co-ordinate remediation;
• Security enablement: Advise and answer queries from Minders, contribute to security guidelines, awareness and best practices. Work with development teams to integrate threat modeling into the software development lifecycle, identifying and mitigating potential security risks;
• Incident response: Provide assistance during containment and recovery, prepare reports and use the lessons learned to strengthen our defenses, applying frameworks like MITRE ATT&ACK;
• Systems integration: Develop scripts and tools to automate repetitive tasks, leverage Infrastructure as Code (IaC) principles to build and manage integrations across our security tools;

What are we looking for

• Experience: You know what you’re doing and want to learn more. You have at least 3 years of hands-on experience in two or more relevant areas;
• Technical Skills:
• XDR Threat Detection/Response: You know your way around XDR platforms like Palo Alto, CrowdStrike, etc. You can confidently investigate security events. You know how build and tune detection rules with a clear understanding of the specific risks they are meant to catch and the impacts that they have on the incident response process;
• Vulnerability Management: You have hands-on experience with tools like Tenable, Qualys etc. You know how to create scans and reports, query the data and audit the platform itself. Knowledge of how to use the APIs for automation and vulnerability management processes is a plus;
• Scripting and Automation: You don\'t like doing repetitive tasks manually. You can write practical scripts to solve problems using languages like Python, or Bash;
• Change management: You know how to test, validate, rollout and rollback changes safely and securely;
• Operating Systems: You have solid Linux and macOS knowledge, as well as a practical understanding of how things work on Windows;
• Cloud and On-prem Infrastructure: You are familiar with networking concepts, cloud (AWS, GCP) and have a strong interest in learning and applying Infrastructure as Code (IaC) principles;
• Security Frameworks: You have a basic understanding of the concepts presented by frameworks like MITRE ATT&CK, NIST, CIS and what it means applying them in practice;
• Communication Skills: You’re a good communicator and are not afraid to ask. English is the main language used at Mindera, so you will be using it a lot, both spoken and in writing;
• Interpersonal skills: You can deal with many people from different backgrounds and skillsets and support them effectively;
• Growth Mindset: You can work autonomously and proactively in a distributed and dynamic organisation. You want to get things done, and done well;