Senior Cyber Security Specialist

Job Overview

We are seeking a highly skilled Cyber Security Analyst to join our team. As a key member of our security department, you will be responsible for identifying and investigating anomalous activities within our SaaS security platform.

In this role, you will leverage your expertise in bot detection, web traffic analysis, and deep behavioral analytics to detect and respond to potential threats.

You will work closely with other teams to contribute to the continuous improvement of our AI/ML detection and response capabilities, ensuring that our platform remains resilient against evolving cybersecurity challenges.

• Threat Detection and Response: Monitor and analyze events from various sources to detect threats and respond with urgency.
• Collaboration and Communication: Work closely with globally distributed teams to accomplish tasks and share knowledge.
• Security Metrics and Reporting: Assist in collecting metrics to measure the efficiency of Security Operations functions.
• Audit and Compliance: Audit the effectiveness of security measures to ensure compliance with industry standards.
• Process Improvement: Assist in implementing security policies and procedures, and fine-tune processes for the team.
• Incident Investigations and Threat Hunting: Participate in various stages of incident investigations and threat hunting engagements.

• Web and API Security: Exposure to web and API security, coding standards, WAFs, advanced persistent threat actors, botnets (off the shelf and custom), and attack mitigation.
• Programming Skills: Hands-on SQL proficiency is essential, as well as experience in scripting and programming (JavaScript, Python, etc.).
• Cloud Security: Knowledge of managing, securing, and preparing production web environments with tools like Kubernetes.
• Threat Hunting: Familiarity with Threat Hunting - Web/API, web hacking, web data analysis, or WAF hands-on experience.
• Cybersecurity Knowledge: In-depth knowledge of web technology and web application security, as well as a deep understanding of the cybersecurity threat landscape and the attacker mindset.
• Communication and Collaboration: Be a great collaborator and communicator, stay curious, and enjoy innovating.

• Analytics and Visualization Tools: Familiarity with open-source analytics and visualization tools like Grafana, Apache Superset.
• Red Teaming Experience: Experience red-teaming, especially developing bot-nets and whitehat hacking.
• Web Security Modules: Hands-on knowledge of web security modules and secure configuration.
• API Test Automation: Hands-on experience and proficiency in API test automation and standardization.
• Computer and Network Security: Experience and solid knowledge on computer and network security.
• Integration and Orchestration: Integrating security into build automation, deployment automation, test automation, SDLC orchestration, environment management, monitoring, and production.
• Mentorship and Development: Mentor development teams, review pull requests, and guide evolution of the development pipeline.
• Application Packaging and Deployment: Experience with modern application packaging, deployment, containerisation, bug tracking tools, and other supporting tools (Jenkins, Docker, Kubernetes, etc.).
• Compliance and Governance: Familiarity with ISMS (ISO/IEC 27001), SOC2, NIST Cybersecurity Framework, CIS Controls, and Open Web Application Security Project.

• Fully Remote Position: Fully remote position with flexible working hours.
• Dynamic Team: An inspiring team of colleagues spread across the world.
• Pleasant Workflows: Pleasant, modern development and deployment workflows: ship early, ship often.
• High Impact Role: High impact: lots of users, happy customers, high growth, and cutting-edge R&D.
• Flat Organization: Flat organization, direct interaction with customer teams.

We celebrate diversity and are committed to creating an inclusive environment for all members of our team.

Join us as we transform cyber security, user privacy, and machine learning online