Cyber Security Analyst

Sigma Software; United States; Remote; USD 120,000 - 170,000; Full time

Job summary

Sigma Software seeks a Senior Cyber Security Analyst to join a team focused on identifying, investigating, and mitigating malicious web activity across large-scale digital environments. You will work with high-volume traffic data, analyze suspicious behavior, and contribute to security detections for bots, fraud, and online threats.

The role requires hands-on threat investigations, strong SQL/Python skills, and experience with Kibana/OpenSearch, Snowflake, and Datadog.

Qualifications

• 3–5 years of experience in Cybersecurity, Threat Research, or Threat Intelligence.
• Bachelor’s degree in Computer Science, Cybersecurity, Information Security, or a related field.
• Strong understanding of web technologies and networking fundamentals (HTTP/HTTPS, TCP/IP, DNS, cookies, and browser-server interactions).
• Experience in web security research, bot management, fraud detection, or related domains.
• Hands-on experience with threat investigations, IOC analysis, and threat intelligence research.
• Experience with log analysis and investigation platforms such as Kibana/OpenSearch, Snowflake, Datadog, or similar tools.
• Strong SQL skills, including working with large datasets and UDFs.
• Basic knowledge of JavaScript for web and client-side analysis.
• Strong analytical and problem-solving skills.
• Ability to work independently and manage investigations with minimal supervision.
• Strong communication and collaboration skills.
• Passion for cybersecurity and continuous learning.
• Knowledge of MITRE ATT&CK, malware analysis, vulnerabilities, and adversary TTPs.
• OSINT and cyber threat intelligence research experience.
• Python and Jupyter Notebook experience for investigations and automation.
• Experience with GitHub and version control workflows.

Responsibilities

• Monitor and investigate potential security threats using tools like Kibana/OpenSearch and Snowflake.
• Analyze security logs and investigate suspicious or unusual activity, including traffic spikes and changes in attack patterns.
• Determine whether activity is malicious or benign and identify responses; develop detections.
• Develop, tune, and deploy detection rules based on traffic behavior and indicators.
• Monitor detections and attack patterns to ensure effectiveness and adapt to changes.
• Support customer onboarding by analyzing web traffic and configuring baseline protections.
• Investigate customer incidents and missed detections to improve protection coverage.
• Document threats with evidence, findings, and indicators.
• Communicate findings to Engineering and stakeholders with technical remediation details.
• Collaborate with counterparts via ticketing systems to investigate issues and provide updates.

Skills

Threat analysis

Incident response

Threat hunting

SQL

Python

JavaScript

GitHub

OpenSearch

Kibana

Education

Bachelor’s degree in Computer Science, Cybersecurity, Information Security, or related field

Tools

Kibana/OpenSearch

Snowflake

Datadog

GitHub

Job description

Описание: As a Senior Cyber Security Analyst, you will join a team focused on identifying, investigating, and mitigating malicious web activity across large-scale digital environments. The role combines threat analysis, traffic investigation, detection engineering, and collaboration with customers and internal engineering teams to improve protection mechanisms and threat visibility. You will work with high-volume traffic datasets, analyze suspicious behavior patterns, and contribute to the continuous improvement of security detections related to bots, fraud attempts, and other web-based threats.

CUSTOMER

Our client delivers advanced cybersecurity solutions designed to protect organizations, users, and digital ecosystems from evolving online threats. The company specializes in bot defense and anti-malvertising technologies for the AdTech industry, supporting SSPs, DSPs, agencies, and publishers through scalable protection platforms, customizable reporting tools, and API integrations.

PROJECT

The project focuses on real-time threat detection and bot mitigation for enterprise-scale clients. Cyber Security Analysts collaborate directly with customers, leveraging advanced analytics platforms to identify malicious traffic patterns and neutralize online threats. This dynamic environment requires both technical expertise and strong communication skills.

Задачи:

• Monitor and investigate potential security threats using tools such as Kibana/OpenSearch and Snowflake.
• Analyze security logs and investigate suspicious or unusual activity, including spikes in traffic, unexpected changes in attack patterns, and new or disappearing attack signals.
• Determine whether detected activity is malicious or benign and identify the appropriate response, including detection engineering to block malicious activity when needed.
• Develop, tune, and deploy detection rules based on traffic behavior, HTTP request attributes, headers, device fingerprints, and other indicators to mitigate malicious activity.
• Monitor existing detections and known attack patterns to make sure they continue to work as expected and identify any unusual changes in volume, sources, IPs, domains, or other indicators.
• Support customer onboarding by analyzing web application traffic flows and configuring baseline detection and protection rules.
• Investigate customer-reported incidents and missed detections, analyze attack traffic, and implement mitigations to improve protection coverage.
• Document newly discovered threats and attacks, including evidence, findings, and indicators.
• Communicate findings to Engineering and other stakeholders and provide the necessary technical details to support remediation and improvements to detection and protection mechanisms.
• Partner directly with counterparts through a ticketing system and support portal to investigate issues, provide updates, and resolve security-related requests.

Требования:

• 3–5 years of experience in Cybersecurity, Threat Research, or Threat Intelligence
• Bachelor’s degree in Computer Science, Cybersecurity, Information Security, or a related field
• Strong understanding of web technologies and networking fundamentals, including HTTP/HTTPS, TCP/IP, DNS, authentication, cookies, and browser-server interactions
• Experience in web security research, bot management, fraud detection, or related domains
• Hands‑on experience with threat investigations, IOC analysis, and threat intelligence research
• Experience with log analysis and investigation platforms such as Kibana/OpenSearch, Snowflake, Datadog, or similar tools
• Strong SQL skills, including working with large datasets and UDFs
• Basic knowledge of JavaScript for web and client-side analysis
• Strong analytical and problem-solving skills
• Ability to work independently and manage investigations with minimal supervision
• Strong communication and collaboration skills
• Passion for cybersecurity and continuous learning
• Knowledge of MITRE ATT&CK, malware analysis, vulnerabilities, and adversary TTPs
• OSINT and cyber threat intelligence research experience
• Python and Jupyter Notebook experience for investigations and automation
• Experience with GitHub and version control workflows