Cyber Security Analyst

This is a fully remote position, open to applicants in Colombia.

📋 Description

• Address and analyze escalations of high-complexity cybersecurity incidents in SOC N3.

• Examine suspicious emails, phishing campaigns, indicators of compromise (IoC), and emerging threats.

• Propose actions for detection, containment, and mitigation.

• Design and suggest use cases, correlation rules, alerts, and detection mechanisms.

• Identify integration needs for applications and event sources with SIEM/SOAR platforms.

• Develop and optimize automated processes for reporting, indicators, incident tracking, and operational activities of the SOC.

• Manage technical requirements with specialized vendors, including Deloitte, and oversee implementations.

• Assist in vulnerability analysis, code reviews, and secure development practices, including DevSecOps.

• Prepare technical and executive reports, procedures, standards, recommendations, incident documentation, and lessons learned.

• Identify gaps and optimization opportunities in monitoring, detection, and response.

• Coordinate activities with cybersecurity, infrastructure, development teams, and vendors.

⛳️ Requirements

• Degree in Systems Engineering, Computer Engineering, Telecommunications, or related fields.

• At least 3 years of experience in cybersecurity, preferably in SOC N2/N3 environments, incident management, and threat intelligence.

• Experience in analyzing and managing cybersecurity incidents and SOC N3 escalation.

• Knowledge of SIEM/SOAR platforms, log analysis, correlation rules, and use cases.

• Experience in threat intelligence, analyzing suspicious emails, phishing, and indicators of compromise (IoC).

• Familiarity with the MITRE ATT&CK framework and threat detection techniques.

• Experience in process automation, report generation, and security indicators.

• Knowledge of application integration and event sources with monitoring and security tools.

• Understanding of application security, vulnerability analysis, and DevSecOps practices.

• Ability to create technical documentation, executive reports, and technical requirements for vendors.

• Desirable experience with Microsoft Sentinel, Microsoft Defender XDR, and SOAR tools.

• Preferred knowledge of scripting and automation using Python, PowerShell, or similar technologies.

• Desirable experience in financial or highly regulated sectors.

• Preferred knowledge of OWASP, ISO 27001, and best practices in technological risk management.

• Technical English proficiency for interpreting documentation and cybersecurity tools.

🏝️ Benefits

• Remote work

• Opportunity to work with a client in the financial sector

• Participation in cybersecurity, automation, and DevSecOps projects