Security Operations Engineer/Analyst

Join our dynamic cybersecurity team as a Security Operations Engineer/Analyst, where you will play a crucial role in enhancing our security monitoring capabilities, focusing on the implementation and maintenance of our Security Information and Event Management (SIEM) system.Collaborating with cross-functional teams, you will be responsible for incident response, threat hunting, and ensuring effective detection and response through the development of new SIEM controls and rules.

Key Responsibilities:

• Developing new SIEM controls/rules for better detection and response
• Upgrade and maintain security monitoring (SIEM), logging, and auditing
• Contribute to security projects (Threat Hunting, Reconnaissance assessment, Phishing campaigns simulation)
• Participate and collaborate in security audits
• Respond to customer requests and queries
• Collaborate with teams in case of an incident
• Conduct periodic user access control audits
• Running workshops on threat modeling, log selection, use case generation
• Perform security monitoring: response, eradication, and recovery activities

Skill & experience required to be successful in this role

• Flexible and enjoy working on challenging projects in a professional start-up culture
• Hands-on experience with Identity and Access Management (IAM), Cloudflare (or similar products), operating systems, database security, and Mobile Device Management (MDM)
• 2+years of experience in Information Security
• Experience in writing alerts, creating dashboards, reports, and playbooks
• Scripting experience (Python, Javascript, Bash/PowerShell)
• Knowledge of network security principles, including IP security, firewalls, proxy technology, Network Access Control (NAC), intrusion prevention and detection systems
• SIEM /Monitoring experience
• Experience in Incident Response and Threat Hunting, use-case generation
• Self-motivated and able to work independently
• Knowledge of incident/vulnerability management or cyber-threat hunting

• Nice-to-have:
• Understand or are interested in crypto, blockchain, and Web3 technology
• Experience with security assessments and audits, including vulnerability scanning and penetration testing