Senior Cybersecurity Detection Analyst

at  Getronics

At Getronics we are looking to expand our IT Security team by incorporating a Cybersecurity Detection Analyst in remote mode during office hours although if you live in Barcelona or surroundings it would be great as our SOC is located there (not a must).
The person joining will help us build on the existing ATT & CK based managed manual for the Getronics Security Operations Center and develop it to the next level of maturity and capability. In addition, you will support us with the day-to-day threat detection work of a team of analysts serving a wide range of customers in different industries, as well as Getronics’ private and hybrid cloud services and internal IT.

REQUIREMENTS

• Minimum two years of experience as Cybersecurity Detection Analyst and working with SIEM technology (QRadar, LogRhythm, Splunk Elastic Security, InsightsIDR, AlienVault OSSIM, etc.).
• Previous experience in other cybersecurity technical areas, e.g. SOC Analyst, Cyber Intelligence Technical Analyst, pentester, etc.
• Experience with hands-on implementation of detection playbooks based on the MITRE ATT&CK framework.
• Experience as a problem solver and analytical thinker.
• Experience and solid understanding of the information security threat landscape, such as attack vectors and best practices to protect systems and networks.
• Experience and/or advanced knowledge with at least two of the following technologies – Python, RegEx, Sigma and YARA.
• Experience with performance tuning correlation rules.
• Strong communication skills, ability to summarize well and write clear documentation.
• Fluent English, written and spoken as you will have international level interlocutions.
• Structured and results oriented way of working.

One or more of the following would be an asset, although not essential:

• Strong understanding of common logging and analysis formats, including cloud technologies.
• Experience with MITRE D3FEND
• Solid understanding of the cyber threat landscape.
• Desirable certifications/training: SANS SEC511 continuous monitoring (GIAC GMON certification), SIEM certifications (any fabricant), Cloud certifications (AWS, Azure, other).
• Engineering / Master’s degree in Computer Science or Security, etc.

Please refer the Job description for details