Cyber Security Analyst

This is a fully remote position, open to applicants in Colombia.

📋 Description

• Manage the lifecycle of vulnerabilities, from identification, analysis, and prioritization to tracking remediation and validating closure.

• Coordinate and engage in security testing such as internal and external Ethical Hacking, application testing, social engineering, Red Team activities, and attack simulations.

• Define and oversee the technical scope of security tests, coordinating execution with the involved teams.

• Conduct validation and QA of findings, results, and security reports.

• Prepare technical and executive reports, indicators, progress reports, and communicate results.

• Assess the security of new applications and services, identifying risks and recommending mitigation controls.

• Analyze logs, alerts, suspicious processes, indicators of compromise, and other security evidence.

• Address N3 escalations from the SOC and support the analysis of specialized events and incidents.

• Participate in passive on-call duties 7x24.

• Provide technical follow-up, documentation, and closure of assigned activities.

• Engage in technical meetings with clients and internal teams, communicating progress, risks, and required actions.

⛳️ Requirements

• Professional degree in Systems Engineering, Electronics, Telecommunications, Computer Science, or related fields.

• Minimum of 2 years of experience in cybersecurity, preferably in vulnerability management, Ethical Hacking, SOC, incident analysis, or application security.

• Knowledge of vulnerability management and scanning tools such as Tenable/Nessus, Qualys, Rapid7, or similar.

• Familiarity with or knowledge of Burp Suite, Nmap, Metasploit, or equivalent tools.

• Understanding of SIEM platforms, log analysis and correlation, EDR/XDR, Firewall, WAF, IDS/IPS, and other security technologies.

• Knowledge of OWASP Top 10, CVE/CVSS, MITRE ATT&CK, hardening practices, and incident response fundamentals.

• Proficiency in Windows/Linux, TCP/IP networking, application security, and Cloud fundamentals (Azure/AWS).

• Desirable knowledge of scripting with Python, PowerShell, or Bash.

• Technical English for interpreting documentation, advisories, vulnerabilities, and manufacturer documentation.

• Availability to participate in passive on-call duties 7x24.

• Skills in analysis and problem-solving, effective communication, report writing, teamwork, autonomy, proactivity, customer orientation, and follow-up of activities until completion.

• Certifications such as CompTIA Security+, CEH, eJPT, OSCP, or equivalent related to cybersecurity will be valued.

🏝️ Benefits

• Participation in a passive on-call duty schedule 7x24, according to the established timetable.