Junior Security Analyst (f/m)

Pestana Hotel Group; Portugal; Presencial; EUR 30 000 - 40 000; Tempo integral

Vantagens oferecidas por esta oferta de emprego

Hands-on learning environment

Growth opportunity within cybersecurity

Resumo da oferta

Pestana Hotel Group in Portugal is seeking a Junior Endpoint Security Analyst to enhance endpoint protection through monitoring and incident response. This role offers hands-on experience in security operations and direct exposure to real-world security challenges.

The candidate will handle alerts, support operational management of cybersecurity tools, and investigate suspicious activities. A solid interest in cybersecurity is essential, along with a proactive attitude and clear communication skills.

Qualificações

• Basic understanding of common security threats affecting endpoints.
• Comfort working with technical tools and documented workflows.
• A proactive attitude with a willingness to learn.

Responsabilidades

• Monitor, triage, and respond to endpoint security alerts.
• Support the management of cybersecurity tools and endpoint visibility.
• Investigate suspicious endpoint activity and document findings.

Conhecimentos

Interest in cybersecurity

Basic understanding of incident response

Ability to assess suspicious emails

Good organizational skills

Clear written communication

Ferramentas

EDR/XDR tools (e.g., Microsoft Defender)

Security monitoring platforms

Descrição da oferta de emprego

Function: Endpoint Security / Incident Response

Level: Junior

We are looking for a Junior Endpoint Security Analyst to join our cybersecurity operations and support the day‑to‑day protection of company endpoints. This is a strong opportunity for someone who wants to build hands‑on experience in incident response, endpoint protection, and security operations while working closely with senior cybersecurity leadership.

What we offer

• A hands‑on learning environment.
• Exposure to real‑world security operations and investigation workflows.
• Growth opportunity within cybersecurity.

What you will do / Responsibilities

• Monitor, triage, and respond to endpoint security alerts and incidents escalated by the SOC.
• Support the daily operational management of cybersecurity tools and help maintain endpoint security visibility.
• Open, update, track, and close tickets related to security incidents and endpoint issues.
• Investigate suspicious endpoint activity such as malware alerts, phishing‑related activity, unauthorized tools, and abnormal behaviour.
• Review, analyse, and respond to suspicious emails and phishing reports, helping to identify malicious content, advise users, and support the containment of email‑based threats.
• Assist with containment and remediation actions on affected endpoints, with support from senior team members when required.
• Document findings clearly, maintain case notes, and ensure incidents are properly recorded for audit and follow‑up.
• Work with IT infrastructure teams to help resolve endpoint‑related security issues efficiently.
• Contribute to improving day‑to‑day security operations, processes, and response quality.

What we are looking for / Requirements

• A junior profile with an interest in cybersecurity, endpoint protection, and operational security work.
• Basic understanding of incident response, alert triage, and common security threats affecting endpoints.
• Basic ability to assess suspicious emails, recognise phishing indicators, and communicate clearly with users when handling reported email threats.
• Basic understanding of computer networking concepts, including TCP/IP, DNS, DHCP, ports, and network fundamentals relevant to security investigations.
• Good organizational skills and the ability to manage several open tickets or incidents at the same time.
• Comfort working with technical tools, structured procedures, and documented workflows.
• Clear written communication and the ability to elevate issues when appropriate.
• A proactive attitude, willingness to learn, and a calm approach under pressure.
• Background in cybersecurity, IT, systems administration, technical support, or a related area is an advantage.

Nice to have

• Exposure to EDR/XDR tools such as Microsoft Defender, Palo Alto Cortex XDR, CrowdStrike, or SentinelOne.
• Exposure to SOC operations, SIEM workflows, or security monitoring platforms.
• Exposure to email security analysis, phishing triage, or secure mail gateways is an advantage.
• Basic knowledge of Windows administration, Active Directory, Microsoft 365, or endpoint management tools.
• Awareness of phishing, malware analysis basics, and common attacker techniques.
• Basic scripting knowledge in PowerShell or Python.

Equal opportunity

We are an equal opportunity employer and value diverse backgrounds and experiences.