Senior Cybersecurity Specialist

At a leading cybersecurity firm, we harness AI/ML to craft cutting-edge security solutions. Our approach revolves around low-overhead teams and rapid iteration, serving hundreds of millions of people worldwide.

As a Senior Cyber Security Analyst, you will leverage your expertise in bot detection, web traffic analysis, and deep behavioral analytics to identify and investigate anomalous activities within our hCaptcha SaaS security platform.

Your primary responsibilities include conducting advanced investigations of potential automated and human threats, analyzing complex patterns and behaviors, and developing actionable insights to enhance our security posture. Collaborating closely with other teams, you will contribute to the continuous improvement of our AI/ML detection and response capabilities, ensuring our platform remains resilient against evolving cybersecurity challenges.

By staying up-to-date with the latest developments in the cybersecurity landscape, you will play a pivotal role in fortifying the security of our platform, thereby protecting our customers' data and digital assets.

• Monitor, identify and analyze events from various sources to detect threats and respond with urgency.
• Collaborate with globally distributed teams to accomplish tasks efficiently.
• Assist in collecting metrics to measure the efficiency of Security Operations functions.
• Audit the effectiveness of security measures to ensure systems meet Security compliance norms.
• Assist in implementing security policies and procedures.
• Fine-tune processes and update standard operating procedures for the team.
• Participate in incident investigations and threat hunting engagements at various stages.
• Work closely with internal company teams, such as Product, Customer Success, etc.

• Experience in web and API security, coding standards, WAFs, advanced persistent threat actors, botnets (off-the-shelf and custom), and attack mitigation.
• Hands-on SQL proficiency is mandatory.
• Knowledge of managing, securing, and preparing production web environments with tools like Kubernetes.
• Familiarity with Threat Hunting - Web/API, web hacking, web data analysis or WAF hands-on experience.
• In-depth knowledge of web technology and web application security.
• Deep understanding of the cybersecurity threat landscape and the attacker mindset.
• Experience in scripting and programming (JavaScript, Python, etc.).
• Interest in keeping up with industry trends and market demands to recommend product enhancements and new sources of intelligence.
• Demonstrated interest in working with data and metrics as applied to security.
• Be a great collaborator and communicator, stay curious and enjoy innovating.

• Familiarity with open-source analytics and visualization tools like Grafana, Apache Superset.
• Experience red-teaming, especially developing bot-nets and white-hat hacking.
• Hands-on knowledge of Web security modules and secure configuration.
• Hands-on experience and proficiency in API test automation and standardization.
• Experience and solid knowledge on computer and network security.
• Integrating security into build automation, deployment automation, test automation, SDLC orchestration, environment management, monitoring, and production.
• Mentor development teams, review pull requests, and guide evolution of the development pipeline.
• Experience with modern application packaging, deployment, containerization, bug tracking tools, and other supporting tools (Jenkins, Docker, Kubernetes, etc.).
• Familiar with ISMS (ISO/IEC 27001), SOC2, NIST Cybersecurity Framework, CIS Controls, and Open Web Application Security Project.

• Flexible remote work arrangement with flexible working hours.
• An inspiring team of colleagues spread across the globe.
• Pleasant, modern development and deployment workflows: ship early, ship often.
• High impact: lots of users, happy customers, high growth, and cutting-edge R&D.
• Flat organization, direct interaction with customer teams.

We celebrate diversity and are committed to creating an inclusive environment for all members of our team.