[Hiring] Cyber Defense Engineer II @Kraken

Role Description

Help us use technology to make a big green dent in the universe! Kraken powers some of the most innovative global developments in energy. We create the technology that redefines utilities and unlocks a new energy system of the future. By optimising renewable generation, building a more intelligent grid, and empowering utilities to deliver an exceptional customer experience, our operating system is transforming the industry worldwide.

It’s an incredibly exciting time to work in energy. Join us on our mission to improve the lives of ONE BILLION humans within the decade and shape a cleaner, better future for everyone.

We are seeking a Security Operations Analyst that will become a member of a growing global Security Team in Kraken Technologies. You’ll play a crucial role in helping to ensure that we continue to protect Kraken and our Clients by analysing and responding to security incidents. This is a critical position that is a full-time member of a team approaching security in a way which is able to move at the pace of Kraken.

What you’ll own

• Contribute to a broad range of cyber defense functions, including Kraken’s Security Operations Center (SOC), threat intelligence, detection engineering, incident response, and continuous improvement of our detection and response capabilities.
• Monitor, triage, and investigate security incidents on Kraken’s infrastructure and Client instances.
• Respond to alerts generated by our Security Information and Event Management (SIEM) system.
• Automate and continuously expand the detection capabilities.
• Analyse application, Cloud and access logs and events to identify potential security threats and vulnerabilities and code this analysis for future playbooks.
• Identify where escalation of incidents, or notification to third parties may be required.
• Provide incident response support working with our engineering and product teams where necessary.
• Maintain, improve and automate incident response processes and playbooks, to continually improve the team's capabilities.
• Prepare reports and incident summaries, as well as review and improve the content and presentation of reports produced by the team.
• Maintain and update security incident documentation including analysis findings and recommended mitigation strategies, automating wherever possible.
• Liaise with stakeholders in relation to incident root cause and provide remediation/improvement recommendations.
• Participate in a roster covering weekends and public holidays, in coordination with other team members globally, to deliver a 24x7 operations capability.

What you'll bring to the party

• A strong Security Operations and technology background.
• Experience in using SIEM platforms to analyse and respond to security alerts.
• Familiarity with EDR (Endpoint Detection and Response) tools and their capabilities, including host containment and evidence preservation.
• Knowledge of best practices for analysing incidents and logs in a cloud environment.
• An understanding of how different mitigation strategies can contain and respond to security events.
• An understanding of Cloud and software architectures.
• Strong analytical and problem-solving skills, with the ability to identify, triage and mitigate incidents.
• Ability to collaborate effectively across Cyber Defense functions and with internal stakeholders, communicate clearly during potentially high-pressure incidents, and support colleagues to deliver a coordinated, timely, and effective incident response.
• A passion for security, a drive to improve security alerting and response processes by harnessing technology and automation.
• Good experience in at least some of the areas mentioned above (we’re not expecting any candidate to be an expert in all areas).

Bonus points

• Experience working in a SOC or CERT that monitors multiple client infrastructure/instances.
• Experience with AWS environments including AWS security monitoring, logging (e.g., CloudTrail, GuardDuty).
• Relevant certifications or qualifications related to Security Operations.
• Basic scripting or automation skills using SOAR tooling to optimise tasks and develop security automation workflows.

Benefits

• Flexible working environment - genuine work life balance.
• Equity Options Scheme - you own your own part of the business, share options in Kraken.
• Office - tech requirements are accommodated, with drinks, snacks, and a coffee machine available.
• Your development is important - support for internal and external courses, learning, study support, etc.