Senior Security Analyst

This is a fully remote position, open to applicants in Argentina.

📋 Description

• Oversee and evaluate security events across network, endpoint, and cloud environments utilizing Elastic SIEM.

• Investigate and confirm potential security incidents, such as malware infections, phishing attempts, unauthorized access, and other malicious activities.

• Conduct initial triage, classification, and prioritization of security alerts.

• Assist in incident response by gathering and analyzing evidence, escalating critical threats, and aiding in containment and remediation.

• Correlate logs and security events from firewalls, IDS/IPS, web servers, endpoints, and cloud platforms to detect indicators of compromise.

• Create, fine-tune, and enhance detection rules, dashboards, and alerts within Elastic SIEM.

• Utilize threat intelligence, including IOCs and adversary TTPs, to improve detection capabilities.

• Document investigations, incident findings, response actions, and lessons learned.

• Generate security metrics, reports, and operational summaries for stakeholders.

• Collaborate with Security Operations, IT, and cross-functional teams on threat detection and incident response.

• Contribute to process enhancements, operational procedures, and knowledge-sharing initiatives.

• Remain updated on emerging threats, attack techniques, vulnerabilities, and security best practices.

• Work Sunday to Thursday or Tuesday to Saturday during the day shift.

• This position can be performed remotely/home office, with some travel required.

⛳️ Requirements

• Strong analytical, problem-solving, communication, and technical documentation abilities.

• Capability to investigate security events, analyze findings, and clearly communicate risks and recommendations to both technical and non-technical audiences.

• Experience in monitoring, investigating, and responding to security incidents within a SOC or security operations environment.

• A minimum of 2 years of experience in cybersecurity, security operations, threat detection, incident response, or a related technical role is preferred.

• Practical experience with Elastic SIEM or similar SIEM platforms for monitoring, investigations, alerting, and log analysis.

• Strong comprehension of security operations concepts, including incident triage, threat detection, alert management, and escalation procedures.

• Knowledge of network security fundamentals, such as TCP/IP, DNS, HTTP/S, SMTP, firewalls, IDS/IPS, VPNs, and common attack vectors.

• Experience in log analysis and event correlation across endpoints, networks, cloud platforms, and security technologies.

• Familiarity with threat intelligence concepts, Indicators of Compromise (IOCs), MITRE ATT&CK, and common adversary tactics, techniques, and procedures.

• Understanding of Windows, Linux, and cloud environments, including common authentication mechanisms and security logging sources.

• Experience with ticketing systems, case management platforms, and security documentation processes.

• Proficiency in English.

🏝️ Benefits

• Swiss Medical SMG 30 (primary family group)

• AWS certifications

• Corporate benefit program with Pedidos Ya!

• Discounts at Unilever, Samsung, BGH, Peña Flor, and more

• Discounts at educational institutions

• Internet and connectivity support

• Compensation for childcare expenses (for children aged 0 to 3 years)

• Competitive salary and benefits package

• English language support in the company

• Work from Anywhere: Enjoy the flexibility to work from various locations worldwide

• Gifts for special occasions (marriage, graduation, birthdays, etc.)

• Christmas Box

• Day off for birthdays

• 10 (ten) calendar days of paternity leave

• An exceptional learning environment for your development

• Comprehensive group benefits

• Flexibility in work arrangements

• Time off when you need it

• Casual work environment