Information Security Analyst

Information Security Analyst – Cyprus, Greece or Remote

The Role:

We are looking for an Information Security Analyst to join our growing team. The successful candidate will contribute towards safeguarding business operations as part of our Security Operations team, responsible for detecting and responding to security threats. Specifically, you will be involved in actively tuning existing detection analytics and standard operating procedures, creating new ones where necessary, deploying or improving existing or new technology, and maturing our threat intelligence capability.

The main responsibilities of the position include:

• Develop and maintain detection use cases alerts for assets at office locations, in-service provider data centres, and cloud.
• Train the team on detection and response for cloud security incidents.
• Continuously expand the monitoring scope based on the team’s detection and response maturity.
• Triage alerts and respond to incidents.
• Document incident reports and organize post-incident activity reviews.
• Produce the security operations monthly report.
• Conduct in-depth security investigations, analyzing logs, network traffic and other available data sources.
• Document procedures, guidelines, triage guides, response playbooks, review and update them annually.
• Perform threat modelling and crown jewel exercises.
• Manage security controls such as the SIEM, XDR, CASB, and email security.
• Provide incident response training to the rest of the organization and conduct tabletop exercises.
• Promote security awareness.
• Identify risks, escalate them to the risk management committee, and propose mitigations.
• Stay up to date with recent trends or events in the security industry such as new technology, vulnerabilities, exploits, and incidents.
• Provide support and advice for anything related to security to the wider organization.
• Mentor new team members.

Main requirements:

• BSc/MSc in Information Security or any other related field
• Holding one of the following certifications will be considered an advantage: GCFA, GCFE, GCIH, GREM, GCIA, GMON, GCFR, eCIR.
• At least 2 years’ working experience in security operations or as part of an Incident Response team.
• Experience with digital forensics / incident response and malware analysis is a plus.
• Experience in security operations and managing security systems.
• Experience developing triage guides and playbooks.
• Experience developing SIEM detection alerts and use cases.
• Ability to work autonomously with minimal supervision.
• Teamwork and attention to detail.
• Self-motivated, organized, and proactive.
• Good analytical skills.
• Comfortable presenting to senior members of the organization and to large audiences.
• Problem-solving and critical thinking skills.
• Ability to learn new technologies quickly and in depth.
• Ability to cope with stress and meet tight deadlines.

Benefit from:

• Attractive remuneration package
• Food allowance
• Intellectually stimulating work environment
• Continuous personal development and international training opportunities
• Attractive relocation package and support for a smooth relocation for you and your family