Security Analyst

We are looking for a talented Security Analyst experienced in Cyber/Information/Network/Cloud Security in enterprise environments, with basic knowledge of threat analysis of event data from commercial and open-source infrastructure technology platforms. Shift rotation is 2 days on, 2 days off, 12 hours, with 11 work hours and 1 hour for rest. Responsibilities Monitor on-prem and AWS infrastructure for attacks, intrusions and unusual, unauthorized or illegal activity Monitor identity and access management, including monitoring for abuse of permissions by authorized system users Create SIEM and SOAR detection and remediation scenarios, and implement them as rules Create, test and update playbooks Perform threat hunting and support threat intelligence processes Carry out other security operations activities alongside security monitoring Generate reports for both technical and non-technical staff and stakeholders Use advanced analytic tools to determine emerging threat patterns and vulnerabilities Requirements 1+ years of experience with SIEM solutions such as Splunk, QRadar, ArcSight, LogRhythm, ELK or Wazuh Experience with SIRP/SOAR tools such as TheHive, Cortex, Phantom, XSOAR or Resilient Knowledge of Internet security, networking protocols, and related technologies, including IDS/IPS, firewalls and content filtering Familiarity with Network Behavior Analysis tools, anti-malware, and packet inspection Understanding of Windows, Linux, DB and network device monitoring and logging techniques Understanding of host and network security hardening, networking protocols, common intrusion techniques and common risk management concepts Knowledge of malware detection, intrusion detection and prevention systems Proficiency in English at a B2+ level Nice to have Experience with AWS Experience with network security Experience with Firewalls such as F5, Juniper, Check Point, Palo Alto or Cisco