Senior Cyber Security Analyst

This is a fully remote position, open to applicants in Poland.

📋 Description

• Oversee and investigate potential security threats utilizing tools such as Kibana/OpenSearch and Snowflake.

• Examine security logs and scrutinize suspicious or atypical activities, including traffic spikes, unexpected shifts in attack patterns, and emerging or vanishing attack signals.

• Identify and document threats and attacks.

• Create, refine, and implement detection rules based on traffic behavior, HTTP request attributes, headers, device fingerprints, and other indicators to counteract malicious activity.

• Monitor existing detections and established attack patterns to ensure their effectiveness, while also identifying unusual changes in volume, sources, IP addresses, domains, or other indicators.

• Assist with customer onboarding by analyzing web application traffic flows and setting up baseline detection and protection rules.

• Investigate incidents reported by customers and missed detections, analyze attack traffic, and apply mitigations to enhance protection coverage.

• Convey findings to Engineering and other stakeholders, providing technical details to aid in remediation and enhancements to detection and protection mechanisms.

⛳️ Requirements

• 3-5 years of experience in Incident Response positions such as Threat Research, Managed Detection and Response, or Customer Security Operations.

• Bachelor’s degree in Computer Science, Cybersecurity, Information Security, or a related discipline.

• Strong comprehension of web technologies and networking principles, including HTTP/HTTPS, TCP/IP, DNS, authentication, cookies, and browser-server interactions.

• Proficiency with log analysis and investigation platforms like Kibana/OpenSearch, Snowflake, Datadog, or similar tools.

• Advanced SQL skills, particularly in handling large datasets.

• Basic familiarity with JavaScript for web and client-side analysis.

• Exceptional analytical and problem-solving abilities.

• Capability to work autonomously and manage investigations with minimal oversight.

• Excellent communication and collaboration skills.

• Enthusiasm for cybersecurity and a commitment to continuous learning.

• Nice to have: Experience in Cybersecurity / Threat Research / Threat Intelligence.

• Nice to have: Practical experience in web security research, bot management, fraud detection, or related security fields.

• Nice to have: A record of tracking threat actors, their TTPs, and indicators of compromise.

• Nice to have: Familiarity with Python and Jupyter Notebook for investigations and automation.

• Nice to have: Experience with GitHub and version control workflows.

🏝️ Benefits

• Competitive salary and performance-based bonuses.

• Comprehensive health, dental, and vision insurance.

• Flexible work hours and remote work options.

• Opportunities for professional development and continuous education.

• A collaborative and inclusive work environment.