[Hiring] Security Operations Analyst @Talan

Role Description

We are looking to join a Senior consultant within the Cyber Security Operations Center (CSOC), a globally distributed team of cybersecurity professionals responsible for protecting complex and diverse technology environments. The role is primarily focused on enhancing threat detection and cybersecurity operations capabilities through activities such as:

• Security content management
• Quality assurance and validation of detection mechanisms
• Detection use case lifecycle management
• Onboarding and integration of new security data sources
• Reporting
• Process optimization

This is an excellent opportunity for professionals interested in working within a large-scale international cybersecurity environment, where they will play a key role in the continuous improvement of security monitoring and threat detection services across multiple customer landscapes. The position combines elements of:

• Security Operations
• Threat Detection Engineering
• SIEM optimization
• Cyber risk management
• Operational excellence

Offering exposure to a wide variety of cybersecurity technologies and challenges.

Qualifications

• On-Call Availability (On-Call Shift System)
• Mandatory 24/7 On-Call Rotation: You will be required to participate in a rotating on-call shift schedule from Monday to Sunday.
• Must have: +5 years of relevant experience in information technology field, including triage of alerts and supporting security incidents
• Proven experience on administering a SIEM platform, preferably either Splunk or Microsoft Sentinel SIEM
• Proven experience with the usual toolbox available in a SOC (e.g., SIEMs, EDRs) and being able to autonomously perform technical analysis of security threats and collaborate with Incident Response team
• Deep knowledge of Microsoft Security Tools (e.g. M365, Cloud App Security, Azure, Defender for Endpoints, Azure Security, Azure Sentinel and XDR)
• Deep Knowledge of Cloud technologies (e.g. Azure, AWS and GCP)
• Deep knowledge of SIEM tools like Splunk, QRadar, ArcSight, MS Sentinel, ELK Stack
• Knowledge of at least one EDR solution (MS Defender for Endpoint, CrowdStrike)
• Knowledge of email security, network monitoring, and incident response
• Knowledge of Linux/Mac/Windows
• C1 English proficiency

Requirements

• Experience in building SIEM architectures from initial design to implementation, including designing data ingestion pipelines for diverse log sources across cloud and on-prem environments
• Proven knowledge of monitoring AWS environment (IaaS, SaaS, PaaS)
• Knowledge of at least one general-purpose or shell scripting language (e.g. Ruby, Bash, PowerShell, Python, etc.)
• Desirable certifications: MCSE, CCNA, Microsoft Azure (e.g., SC-200), GCIH, CEH, GCFA or any GIAC/similar certification

Benefits

• Remote Position
• Freelance, full-time contract
• Training and career development
• Possibility to be part of a multicultural team and work on international projects