Overview
Number8 is seeking qualified candidates to fill the role of Senior Security Analyst.
In addition to a competitive salary rate and a positive work environment committed to delivering high-quality technology solutions, we also offer:
Flexible schedules and authentic work-life balance
Opportunities for continuing education
Social activities per country sponsored by the company
Birthday celebration
Payment in US Dollars
About the role:
Our client is a software company that specializes in accounting tax, budgeting, and analytics software solutions for asset-intensive businesses.
We are seeking a Senior Security Analyst who will be responsible for using various tools and techniques to detect, analyze, and respond to security incidents, as well as conducting vulnerability assessments and audits. You will also be involved in developing and implementing security policies and best practices, as well as providing guidance and training to other staff members. To be successful in this role, you should have extensive experience with Crowdstrike Falcon, including automation and tuning, as well as experience running vulnerability assessments with Qualys and monitoring, evaluating and tuning alerts in Rapid7 SIEM. You should have a solid understanding of security frameworks, standards, and regulations, such as NIST, ISO, and SOC2.
Some of the main tasks/responsibilities for the role include:
Monitor and analyze network and system activity for potential security breaches, anomalies, and intrusions
Use Crowdstrike Falcon to perform threat hunting, incident response, and malware analysis, as well as to automate and optimize security processes
Use Qualys to conduct vulnerability scans and assessments, and provide recommendations for remediation and mitigation
Use Rapid7 SIEM to collect, correlate, and analyze security events and alerts, and to tune and optimize the alerting system
Prepare and maintain security reports, logs, and documentation
Develop and implement security policies, procedures, and best practices, in compliance with relevant security frameworks, standards, and regulations
Research and stay updated on the latest security trends, threats, and technologies
Implementation and maintenance of security controls, policies, and procedures
Work with CloudOps and Dev teams to resolve configuration issues in the cloud and systems
Help to formalize and document existing information security processes in Confluence
Conduct quarterly access review activities and support other SOC2 calendar activities to support the audit lifecycle
Support compliance audits and assessments, such as SOC2, NIST, and ISO 27001, by providing documentation and evidence of compliance
Help implement and standardize Security responses to security questionnaires using existing and new technologies
Job Skills/Requirements
- +90% English written and oral (at least B2 level) with excellent communication skills
- 5+ years of experience as a Security Analyst, or similar role, in a large, or complex environment
- Extensive experience with Crowdstrike Falcon, including automation and tuning
- Experience with Qualys and Rapid7 SIEM, or similar tools
- Knowledge of security frameworks, standards, and regulations, such as NIST, ISO, SOC2, etc.
- Knowledge of security concepts, principles, and best practices, such as threat modeling, risk assessment, encryption, authentication, authorization, etc.
- Knowledge of network and system security technologies, such as firewalls, IDS/IPS, VPN, antivirus, etc.
- AWS / Azure Cloud experience
- Knowledge of common security vulnerabilities, threats, and attack vectors, such as phishing, ransomware, DDoS, SQL injection, etc.
- Excellent communication, problem-solving, and analytical skills.
- Ability to work independently and as part of a team
- Certifications such as CISSP, CISM, CEH, GCIH, GCFA, etc. are preferred
- Ability to take business requests and break them down into manageable steps to achieve a goal
Apply today to learn more about this exciting opportunity. We are actively interviewing now for this position.
