[Hiring] Information Security Analyst @Mindera

Role Description

We are looking for one mid-level Information Security Analyst to work across all our locations. As a mid-level information security analyst, you will help the team monitor Mindera’s infrastructure, manage vulnerabilities, respond to incidents, and offer advice and support to Minders. You will also have the opportunity to contribute to our procedures as well as research and integrate solutions to continually improve Mindera’s security posture.

Important note: this role primarily involves working within European time zones, requiring a significant overlap with team hours.

• Security monitoring and alerting: Develop, maintain, and fine-tune detection rules for our XDR platform. Investigate security events to determine whether an incident occurred.
• Vulnerability management: Run and analyse vulnerability scans, identify weaknesses, report results and co-ordinate remediation.
• Security enablement: Advise and answer queries from Minders, contribute to security guidelines, awareness, and best practices. Work with development teams to integrate threat modeling into the software development lifecycle, identifying and mitigating potential security risks.
• Incident response: Provide assistance during containment and recovery, prepare reports and use the lessons learned to strengthen our defenses, applying frameworks like MITRE ATT&CK.
• Systems integration: Develop scripts and tools to automate repetitive tasks and leverage Infrastructure as Code (IaC) principles to build and manage integrations across our security tools.

Qualifications

• At least 3 years of hands-on experience in two or more relevant areas.
• Technical Skills:
  • XDR Threat Detection/Response: Experience with XDR platforms like Palo Alto, CrowdStrike, etc. Ability to investigate security events and build/tune detection rules.
  • Vulnerability Management: Hands-on experience with tools like Tenable, Qualys, etc. Knowledge of creating scans, reports, and using APIs for automation.
  • Scripting and Automation: Ability to write practical scripts using languages like Python or Bash.
  • Change management: Knowledge of testing, validating, rolling out, and rolling back changes safely and securely.
  • Operating Systems: Solid knowledge of Linux and macOS, and practical understanding of Windows.
  • Cloud and On-prem Infrastructure: Familiarity with networking concepts and cloud (AWS, GCP) with interest in Infrastructure as Code (IaC).
  • Security Frameworks: Basic understanding of frameworks like MITRE ATT&CK, NIST, CIS.
  • Communication Skills: Good communicator, proficient in English, both spoken and written.
  • Interpersonal skills: Ability to support people from different backgrounds and skillsets effectively.
  • Growth Mindset: Ability to work autonomously and proactively in a distributed and dynamic organization.

Requirements

• Permanent contract
• Unlimited PTO
• Flexible working hours
• Training & conferences, create your own training plan
• Work with large scale systems powering global businesses
• Collaborative team environment with a politics-free culture

Benefits

• Work with a bunch of great people
• Team ownership of projects
• Encouragement to take risks and make decisions
• Focus on communication and collaboration
• Freedom and Responsibility culture
• Value commitment, feedback, and empathy

Company Description

At Mindera we use technology to build products we are proud of, with people we love. Software Engineering Applications, including Web and Mobile, are at the core of what we do at Mindera. We partner with our clients to understand their products and deliver high-performance, resilient and scalable software systems that create an impact in their users and businesses across the world.

Our offices are located: Porto, Portugal | Aveiro, Portugal | Coimbra, Portugal | Leicester, UK | San Diego, USA | San Francisco, USA | Chennai, India | Bengaluru, India | Cluj-Napoca, Romania | Blumenau, Brazil | Casablanca, Morocco | Australia.