Cyber Security Analyst

This is a fully remote position, open to applicants in Argentina.

📋 Description

• Monitor, identify, and evaluate events from various sources to detect threats and respond to incidents promptly.

• Collaborate with teams located worldwide to achieve objectives.

• Support the gathering of metrics to assess the effectiveness of Security Operations functions.

• Review the efficacy of security measures to ensure systems comply with Security standards.

• Aid in the implementation of security policies and procedures.

• Refine processes and subsequently update standard operating procedures for the team.

• Engage in multiple phases of incident investigations and threat hunting activities.

• Work closely with internal teams such as Product and Customer Success.

⛳️ Requirements

• Experience with web and API security, coding standards, WAFs, advanced persistent threats, botnets (both off-the-shelf and custom), and attack mitigation strategies.

• Proficient in SQL is essential.

• Knowledge of managing, securing, and preparing production web environments using tools like Kubernetes.

• Familiarity with Threat Hunting in Web/API, web hacking, web data analysis, or hands-on experience with WAF.

• Extensive understanding of web technology and web application security.

• Comprehensive insight into the cybersecurity threat landscape and the mindset of attackers.

• Experience in scripting and programming with languages such as JavaScript and Python.

• Keen interest in staying updated with industry trends and market needs to suggest product improvements and new intelligence sources.

• Proven enthusiasm for working with data and metrics related to security.

• Excellent collaborator and communicator, curious, and enjoys innovation, as the security landscape is ever-evolving.

• Familiarity with open-source analytics and visualization tools such as Grafana and Redash.

• Experience in red-teaming, particularly in developing botnets and ethical hacking.

• Practical knowledge of web security modules and secure configurations.

• Hands-on experience and proficiency in API test automation and standardization.

• Solid experience and knowledge in computer and network security.

• Integrate security into build automation, deployment automation, test automation, SDLC orchestration, environment management, monitoring, and production processes.

• Mentor development teams, review pull requests, and guide the evolution of the development pipeline.

• Experience with modern application packaging, deployment, containerization, bug tracking tools, and other supportive tools (e.g., Jenkins, Docker, Kubernetes).

• Knowledge of ISMS (ISO/IEC 27001), SOC2, NIST Cybersecurity Framework, CIS Controls, and OWASP principles.

🏝️ Benefits

• Comprehensive health and wellness programs.

• Opportunities for professional development and career growth.

• Flexible work hours and remote working options.

• Engaging and dynamic work environment focused on innovation.