[Hiring] Cyber Security Analyst @Intuition Machines, Inc.

Role Description

As a Cyber Security Analyst, you will leverage your expertise in bot detection, web traffic analysis, and deep behavioral analytics to identify and investigate anomalous activities within our hCaptcha SaaS security platform.

• Monitor, identify and analyze events from a range of sources to spot threats and respond to such incidents with a sense of urgency.
• Collaborate with globally distributed teams to accomplish tasks.
• Assist in the collection of metrics to measure the efficiency of Security Operations functions.
• Audit the effectiveness of security measures to check if the systems meet the Security compliance norms.
• Assist in implementation of security policies and procedures.
• Fine-tune the process and eventually update standard operating procedures for the team.
• Participate in various stages of incident investigations and threat hunting engagements.
• Work closely with internal company teams such as Product, Customer Success, etc.

Qualifications

• Exposure to web and API security, coding standards, WAFs, advanced persistent threat actors, botnets (off the shelf and custom) and attack mitigation.
• Hands-on SQL proficiency is a must-have.
• Knowledge of managing, securing and preparing production web environments with tools like Kubernetes.
• Familiar with Threat Hunting - Web/API, web hacking, web data analysis or WAF hands-on experience.
• In-depth knowledge of the web technology and web application security field.
• Deep understanding of the cybersecurity threat landscape, and the attacker mindset.
• Experience in scripting and programming (JavaScript, Python, etc.).
• Interest in keeping up with industry trends and market demands to recommend product enhancements and new sources of intelligence.
• Demonstrated interest in working with data and metrics as applied to security.
• Be a great collaborator and communicator, stay curious and enjoy innovating.

Requirements

• Familiarity with open source analytics and visualization tools like Grafana, Redash.
• Experience red-teaming, especially developing bot-nets and whitehat hacking.
• Hands-on knowledge on Web security modules and secure configuration.
• Hands-on experience and proficiency in API test automation and standardization.
• Experience and solid knowledge on computer and network security.
• Integrating security into build automation, deployment automation, test automation, SDLC orchestration, environment management, monitoring, and production.
• Mentor development teams, review pull requests, and guide evolution of the development pipeline.
• Experience with modern application packaging, deployment, containerisation, bug tracking tools and other supporting tools (Jenkins, Docker, Kubernetes, etc.).
• Familiar with ISMS (ISO/IEC 27001), SOC2, NIST Cybersecurity Framework, CIS Controls and Open Web Application Security Project.

Benefits

• Fully remote position with flexible working hours.
• An inspiring team of colleagues spread all over the world.
• Pleasant, modern development and deployment workflows: ship early, ship often.
• High impact: lots of users, happy customers, high growth, and cutting edge R&D.
• Flat organization, direct interaction with customer teams.
• We celebrate equality of opportunity and are committed to creating an inclusive environment for all team members.