Senior Cyber Security Analyst

This is a fully remote position, open to applicants in Poland.

📋 Description

• Oversee and analyze potential security threats utilizing Kibana/OpenSearch and Snowflake.

• Examine security logs to investigate any suspicious or atypical activities, including traffic surges, alterations in attack patterns, and emerging or vanishing attack signals.

• Assess whether the identified activities are harmful or harmless and determine suitable responses.

• Create, refine, and implement detection rules based on traffic behavior, HTTP request characteristics, headers, device fingerprints, and various other indicators.

• Supervise existing detections and recognized attack patterns, identifying any unusual fluctuations in volume, sources, IPs, domains, or other indicators.

• Assist in customer onboarding by analyzing web application traffic patterns and configuring baseline detection and protection protocols.

• Investigate incidents reported by customers and missed detections, analyze attack traffic, and apply mitigations.

• Document newly identified threats and attacks, including evidence, findings, and indicators.

• Convey findings to Engineering and other relevant parties to facilitate remediation and enhancements.

• Collaborate with counterparts using a ticketing system and support portal to investigate issues, provide updates, and address security-related requests.

⛳️ Requirements

• 3–5 years of experience in Cybersecurity, Threat Research, or Threat Intelligence.

• Bachelor’s degree in Computer Science, Cybersecurity, Information Security, or a related discipline.

• Solid understanding of web technologies and networking principles, including HTTP/HTTPS, TCP/IP, DNS, authentication, cookies, and browser-server interactions.

• Experience in web security research, bot management, fraud detection, or similar fields.

• Practical experience with threat investigations, IOC analysis, and threat intelligence research.

• Familiarity with log analysis and investigation platforms such as Kibana/OpenSearch, Snowflake, Datadog, or similar tools.

• Proficient SQL skills, including working with large datasets and UDFs.

• Basic knowledge of JavaScript for web and client-side analysis.

• Exceptional analytical and problem-solving capabilities.

• Ability to work autonomously and manage investigations with minimal supervision.

• Strong communication and collaboration skills.

• Enthusiasm for cybersecurity and a commitment to continuous learning.

• Understanding of MITRE ATT&CK, malware analysis, vulnerabilities, and adversary TTPs.

• Experience in OSINT and cyber threat intelligence research.

• Proficiency in Python and Jupyter Notebook for investigations and automation.

• Experience with GitHub and version control workflows.

🏝️ Benefits

• Option for remote work.

• Full-time employment.