The Job in a Nutshell
Coolbet is seeking a Security Analyst to join our InfoSec team! This global team supports not only Coolbet but also all GAN technology and operations, with its main hub in Tallinn and members in the USA and Bulgaria. The InfoSec department handles security risk assessment, vulnerability management, security feature development, and compliance with relevant regulations and standards.
As a Security Analyst, you will assist the Security Operations Lead in establishing and maintaining a Security Operations Center for GAN. You will be instrumental in designing, implementing, and maintaining the threat detection and incident response strategy to safeguard our information assets. You'll collaborate closely with internal security teams, stakeholders, and third parties to continuously enhance our security posture.
A Sneak Peek into Your Role
- Monitoring the organization’s security infrastructure for breaches, intrusions, and malicious trends.
- Monitoring and analyzing security logs and alerts generated by the SIEM to identify and respond to threats. Collaborating with IT teams to onboard new data sources into the SIEM. Creating new SIEM rules and monitors based on analysis.
- Collaborating with other technical teams to perform periodic health checks for maintenance.
- Maintaining syslog servers to ensure seamless log delivery.
- Executing the incident response process, performing root cause analysis, and creating Post Incident Reports when required.
- Investigating security breaches and collaborating with compliance, legal, and data protection offices.
- Planning and performing periodic threat-hunting exercises, creating reports, and presenting them to management when required.
- Assisting with vulnerability assessments in collaboration with the InfoSec team's security specialist.
- Collaborating with IT and security teams to develop and maintain incident response playbooks and security procedures.
- Creating and maintaining security operations technical documentation.
- Keeping up-to-date with the latest security threats, technologies, and best practices.
- Occasionally working outside regular hours to support system needs.
You’re good at
- Over 3 years of experience in Information Security, particularly in a SOC or MSSP environment.
- Hands-on experience as a Tier 2 analyst in security operations, including monitoring, intrusion detection, and incident response.
- Strong understanding of firewalls, proxies, container orchestration, SIEM, XDR, and IDPS concepts.
- Proven experience in implementing and fine-tuning SIEMs, IPS/IDS, WAF, EDR/XDR, and other security products (e.g., Wazuh or other SIEMs). Familiarity with ElasticSearch, Kibana, and/or OpenSearch is an added advantage.
- Ability to analyze and interpret security logs to develop use cases for new SIEM rules.
- Knowledgeable in OpenSearch query DSL.
- Experience in planning and executing threat-hunting exercises.
- Skilled in building incident response playbooks.
- Competent in scripting languages such as Python and Bash.
- Experience managing threat intelligence platforms like OpenCTI and MISP.
- Certifications in Information Security and Incident Response are a plus, and a university degree in Information Technology or a related field is desirable.
- You are patient, calm, respectful, organized, achievement-oriented, with strong interpersonal skills. Able to take initiative, manage stress, multitask, and convey technical information clearly to non-technical colleagues. Committed to continuous personal and professional development.
- Fluency in verbal and written English is a must, as it's our primary means of communication.
Think of this job ad as more of a friendly guide than a rigid 'must-have' list. We're well aware that no one will tick all the boxes, so feel free to apply even if you're not a perfect match – we love close matches too!
Our Benefits, Your Happiness
- Enjoy generous vacation time 🌴 totaling 38 days (28 working days) to maximize your well-deserved time off, along with flexible work hours tailored to your lifestyle.
- Elevate your well-being with monthly sports/health compensation, full sick leave coverage for the first 8 days, our in-house gym, and a chill games room to unwind.
- Unlock a generous Supplemental Training Program that includes training and company-wide knowledge-sharing opportunities to fuel your growth👨🎓.
- Our office is a cozy (and dog-friendly) haven right in the heart of the city. Enjoy complimentary fruits and beverages and free parking. It's the perfect place to be productive and feel right at home.
- Be part of the most legendary events and make amazing connections with colleagues from across the entire company.
- Comprehensive relocation support 🌍 for a smooth transition.
- We foster innovation and independence while celebrating success in a multicultural and diverse company, where you'll work alongside people from around the globe.
- ..plus, if you're not already a pro, we'll teach you how to play poker!♣
Recruitment flow
- Interview - Home assignment - Second Interview - Police record, and background check - Offer
- Start date: ASAP
- Recruiting from within the EU
We are an equal-opportunity employer, and we value diversity. Our diverse backgrounds, experiences, characteristics, and traits make us better at serving customers. So please, come as you are!
Location
Tallinn, Estonia
Coolbet is an award-winning sportsbook, online casino, and poker provider with a presence in 10 countries on 3 continents holding 4 gaming licenses. Together with GAN Limited, the company is set forth to become a dominant supplier in the USA markets. Our office is located in the center of Tallinn, Estonia, with 400+ employees from more than 50 countries. Coolbet's goal is to deliver the best gaming solutions possible by continuously focusing on product development and innovation while creating a new industry standard for responsible gaming. Find out more about Coolbet!
