Security Analyst

This is a fully remote position, open to applicants in Argentina.

📋 Description

• Oversee and assess security events across network, endpoint, and cloud infrastructures utilizing Elastic SIEM.

• Investigate and confirm security incidents, which include malware infections, phishing efforts, unauthorized access attempts, and harmful activities.

• Triage, categorize, and prioritize security alerts based on their impact and severity.

• Assist in incident response by gathering and analyzing evidence, escalating critical threats, and aiding with containment and remediation efforts.

• Correlate logs and events from firewalls, IDS/IPS, web servers, endpoints, and cloud platforms to identify indicators of compromise.

• Create, refine, and enhance Elastic SIEM detection rules, dashboards, and alerts.

• Utilize threat intelligence, IOCs, and adversary TTPs to bolster detection capabilities.

• Document investigations, findings from incidents, response actions taken, and lessons learned.

• Generate security metrics, reports, and operational summaries for stakeholders.

• Collaborate with Security Operations, IT, and cross-functional teams in threat detection and incident response.

• Engage in process enhancements, operational procedures, and knowledge-sharing initiatives.

• Stay updated on emerging threats, attack techniques, vulnerabilities, and security best practices.

⛳️ Requirements

• Strong analytical, problem-solving, communication, and technical documentation skills.

• Ability to investigate security events, analyze findings, and clearly communicate risks and recommendations to both technical and non-technical audiences.

• Experience in monitoring, investigating, and responding to security incidents within a SOC or security operations environment.

• Over 2 years of experience in cybersecurity, security operations, threat detection, incident response, or a related technical role preferred.

• Hands-on experience with Elastic SIEM or similar SIEM platforms.

• Solid understanding of incident triage, threat detection, alert management, and escalation procedures.

• Knowledge of TCP/IP, DNS, HTTP/S, SMTP, firewalls, IDS/IPS, VPNs, and common attack vectors.

• Experience with log analysis and event correlation across endpoints, networks, cloud platforms, and security technologies.

• Familiarity with threat intelligence, IOCs, MITRE ATT&CK, and adversary TTPs.

• Understanding of Windows, Linux, and cloud environments, including authentication mechanisms and security logging sources.

• Experience with ticketing systems, case management platforms, and security documentation processes.

• Advanced English proficiency.

🏝️ Benefits

• Swiss Medical SMG 30 (primary family group).

• AWS certifications.

• Corporate benefit program with Pedidos Ya!

• Discounts at Unilever, Samsung, BGH, Peña Flor, among others.

• Discounts in educational institutions.

• Internet and connectivity support.

• Compensation for childcare expenses (for children aged 0 to 3 years).

• Competitive salary and benefits package.

• English language support within the company.

• Work from Anywhere: the flexibility to work globally.

• Gifts for special occasions (weddings, graduations, birthdays, etc.).

• Christmas Box.

• A day off for birthdays.

• 10 calendar days of paternity leave.

• An excellent learning environment for professional development.

• Comprehensive group benefits.

• Flexibility and time off as needed.

• Casual work environment.