IT&D Senior Cyber Analyst-Security Monitoring & Threat Response
Description
Working globally across functions, youll own your projects and process from start to finish, with the influence and visibility to achieve what needs to be done. And if youre willing to bring your ideas to the table, youll get the support and investment to make them happen.
Your potential will never be wasted. Youll get the space and support to take your development to the next level. Every day, there will be opportunities to learn from peers and leaders through working on exciting, varied projects with real impact. And because our work spans so many different businesses, from Research and Product Development to Sales, youll keep learning exciting new approaches.
As an ITD Senior Cyber Analyst, you will be instrumental in detecting and responding to security incidents, conducting in-depth post-incident technical analysis, and managing security alerts across both IT and OT environments. You will collaborate closely with the Security Engineering Team to refine requirements, develop advanced threat detection mechanisms, create robust incident response playbooks, and implement automation strategies. Furthermore, you will actively participate in threat hunting exercises and contribute to the enhancement of our SIEM and EDR platforms.
- Contribute to the development and refinement of the IT security incident response process and supporting materials.
- Conduct threat hunting activities to identify threat actor groups and their tactics, techniques, and procedures (TTPs).
- Capture threat intelligence on actor TTPs and develop appropriate countermeasures.
- Participate in post-incident reviews and deliver presentations to senior management.
- Engage in security incident tabletop exercises.
- Assist in developing processes and procedures to optimize incident response times, incident analysis, and overall, global CSIRT operations
- Technical expertise in security-related systems and applications such as EDR, IDS/IPS, Proxy, SIEM, WAF, and SOAR.
- Proven experience in developing, documenting, and maintaining security procedures.
- Strong understanding of network infrastructure, including routers, switches, firewalls.
- Proficiency in TCP/IP and network administration/protocols.
- Understanding of how Operating Systems works (Windows, Linux)
- Excellent analytical and problem-solving skills for effective security incident resolution.
- Relevant certifications such as Security+, Network+, GCIA, GCIH, CISP, GMON, etc.
- Ability to work independently with minimal supervision.
- Experience with scripting languages (Bash, PowerShell, Python) is advantageous.
- Solid knowledge of software engineering, information risk, security guidelines, and architecture standards.
- Excellent verbal and written English language skills.
- Innovative and experimental approach to problem-solving.
- Strong communication and interpersonal skills.
Desired Qualifications (if needed):
- Experience with production automation and security operations.
Disclaimer: This job posting has been aggregated from external source. Role details, content, and availability are subject to change. Applicants are advised to confirm the latest information directly on the company website before applying.