Senior Cyber Security Analyst

Brak informacji o wynagrodzeniu

SeniorZdalnie·WarszawaFull-time

#478772·Dodano 3 dni temu·4

Źródło: Sigma Software

Aplikuj teraz

Tech Stack / Keywords

KibanaOpenSearchSnowflake SQL JavaScriptHTTP/HTTPSTCP/IPDNSDatadog Python

Podsumowanie oferty

As a Senior Cyber Security Analyst, you will investigate malicious web activity for a real-time threat detection and bot mitigation project serving enterprise-scale clients in the AdTech industry. You will analyze high-volume traffic and improve security detections using Kibana/OpenSearch and Snowflake.

Wymagania

3–5 years of experience in Incident Response roles such as Threat Research, Managed Detection and Response, or Customer Security Operations.
Bachelor’s degree in Computer Science, Cybersecurity, Information Security, or a related field.
Strong understanding of web technologies and networking fundamentals, including HTTP/HTTPS, TCP/IP, DNS, authentication, cookies, and browser-server interactions.
Experience with log analysis and investigation platforms such as Kibana/OpenSearch, Snowflake, Datadog, or similar tools.
Strong SQL skills, including working with large datasets.
Basic knowledge of JavaScript for web and client-side analysis.
Strong analytical and problem-solving skills.
Ability to work independently and manage investigations with minimal supervision.
Strong communication and collaboration skills.
Passion for cybersecurity and continuous learning.

Nice to have:

Background in Cybersecurity, Threat Research, or Threat Intelligence.
Hands-on experience in web security research, bot management, fraud detection, or related security domains.
History of tracking threat actors, their TTPs, and indicators of compromise.
Python and Jupyter Notebook experience for investigations and automation.
Experience with GitHub and version control workflows.

Obowiązki

Monitor and investigate potential security threats using tools such as Kibana/OpenSearch and Snowflake.
Analyze security logs and investigate suspicious or unusual activity, including traffic spikes, changes in attack patterns, and new or disappearing attack signals.
Discover and document threats and attacks.
Develop, tune, and deploy detection rules based on traffic behavior, HTTP request attributes, headers, device fingerprints, and other indicators to mitigate malicious activity.
Monitor existing detections and known attack patterns, checking that they continue to work as expected and identifying unusual changes in volume, sources, IP addresses, domains, or other indicators.
Support customer onboarding by analyzing web application traffic flows and configuring baseline detection and protection rules.
Investigate customer-reported incidents and missed detections, analyze attack traffic, and implement mitigations to improve protection coverage.
Communicate findings to Engineering and other stakeholders and provide technical details to support remediation and improvements to detection and protection mechanisms.

Sigma Software

39 aktywnych ofert

Zobacz wszystkie oferty

Aplikuj teraz