Senior Security Analyst

This is a remote position.

What You'll Be Doing

• Monitoring, identifying and analyzing events from a range of sources to spot threats and respond to such incidents with a sense of urgency
  

• Collaborating with globally dispersed teams to accomplish tasks
  

• Assisting in the collection of metrics to measure the efficiency of Security Operations functions
  

• Auditing the effectiveness of security measures to check if the systems meet the Security compliance norms
  

• Assisting in implementation of security policies and procedures
  

• Fine-tuning of the process and eventually updating standard operating procedures for the team
  

• Participating in various stages of incident investigations and threat hunting engagements 
  

• Working closely with internal company teams (such as Product, Customer Success, etc.)
  

Requirements 

• Must have a solid exposure to web, API security, coding standards, WAFs advanced persistent threat actors, botnets (off the shelf and custom) and attack mitigation.
  

• Knowledge in managing, securing and preparing production web environments
  

• Familiar with Threat Hunting - Web/ API, web hacking, web data analysis or WAF hands-on experience.
  

• Have an in-depth knowledge of the web technology and web application security field.
  

• Have a deep understanding of the cybersecurity threat landscape, and the attackers mindset.
  

• Have experience in scripting and programming (JavaScript, Python, etc.)
  

• Show an interest in analysing industry trends and market demands to recommend product enhancements and new sources of intelligence
  

• Demonstrate an interest in working with data and metrics as applied to security with respect to large data sets
  

• Be a great collaborator and communicator, be curious and want to innovate
  

Nice to Have

• Experience developing bot-nets and whitehat hacking
  

• Hands on knowledge on Web security modules and secure configuration
  

• Hands-on experience and proficiency in API test automation and standardisation
  

• Experience and solid knowledge on computer and network security
  

• Must have practical experience managing Agile Release Management and maintaining a scalable SDLC
  

• Strong knowledge on Role Based Access Control (RBAC) for Web applications
  

• Integrating security into build automation, deployment automation, test automation, SDLC orchestration, environment management, monitoring, and production
  

• Mentor development teams, review pull requests, and guide evolution of the development pipeline
  

• Experience with modern application packaging, deployment, containerisation, bug tracking tools and other supporting tools ( Jenkins, Docker, Kubernetes, etc.)
  

• Familiar with ISMS (ISO/IEC 27001), SOC2, NIST Cybersecurity Framework, CIS Controls and Open Web Application Security Project