Senior Cybersecurity Analyst – Cyber Defense Operations

This is a fully remote position, open to applicants in Hungary.

📋 Description

• Oversee, prioritize, and investigate security alerts within SIEM, EDR, Microsoft Security, and cloud environments.

• Examine potential cyber threats and security incidents, determining root causes and suitable remediation measures.

• Analyze logs from various systems including Windows, Linux, databases, applications, web servers, firewalls, and network security solutions.

• Collaborate closely with Incident Response teams and cybersecurity experts to contain and mitigate threats.

• Utilize and maintain security monitoring and detection tools to enhance detection capabilities and minimize false positives.

• Generate clear security reports, incident summaries, and technical findings for clients.

• Manage security-related tickets and ensure proper documentation of incidents.

• Contribute to the enhancement of SOC processes, procedures, documentation, and knowledge bases.

• Engage directly with clients to understand their environments and optimize security monitoring efforts.

• Stay informed about emerging threats, technologies, and cybersecurity best practices.

• Participate as part of a 24x7 Security Operations Centre supporting international organizations against evolving cyber threats.

⛳️ Requirements

• A minimum of 5 years of experience in IT, Cybersecurity, or Security Operations.

• Practical experience working in a SOC environment, focusing on security alert triage and incident investigation.

• Strong proficiency with SIEM and EDR technologies.

• Familiarity with Microsoft Sentinel, Splunk, QRadar, ArcSight, or ELK.

• Experience with Microsoft Security technologies, including Defender for Endpoint, Microsoft 365, Sentinel, Azure Security, and XDR.

• Solid understanding of Azure, AWS, and/or GCP.

• Experience with at least one EDR solution, such as Microsoft Defender for Endpoint or CrowdStrike.

• Strong knowledge of networking and TCP/IP.

• Extensive experience analyzing security logs across Windows and Linux environments.

• Understanding of email security, network monitoring, and incident response.

• Experience in managing and processing security tickets.

• Excellent command of spoken and written English.

• Experience in an Incident Response team, especially at Tier I/II, is an advantage.

• Familiarity with monitoring AWS environments, including IaaS, PaaS, and SaaS, is a plus.

• Scripting experience with Python, PowerShell, Bash, Ruby, or similar languages is an asset.

• Cybersecurity certifications such as SC-200, GCIH, CEH, GCFA, GIAC, CCNA, or MCSE are advantageous.

• Experience working in a global, distributed SOC is a benefit.

🏝️ Benefits

• Opportunities for professional growth and learning.

• Chance to join a multicultural team and work in an international setting.

• Private medical insurance.

• Life insurance.

• Lunch and transport card as part of a flexible remuneration package.

• Online language classes.

• Smart Office Pack.

• Option for remote work.

• Full-time and permanent employment contract or contractor mode.