Advanced Cyber Security Expert

We are seeking a seasoned Senior Cyber Security Analyst to join our team. This is an exciting opportunity for a skilled professional to leverage their expertise in bot detection, web traffic analysis, and deep behavioral analytics to identify and investigate anomalous activities within our security platform.

This role involves conducting advanced investigations of potential automated and human threats, analyzing complex patterns and behaviors, and developing actionable insights to enhance our security posture. Working closely with other teams, you will contribute to the continuous improvement of our AI/ML detection and response capabilities, ensuring that our platform remains resilient against evolving cybersecurity challenges.

The ideal candidate will have a strong background in web and API security, coding standards, WAFs, advanced persistent threat actors, botnets (off the shelf and custom) and attack mitigation. Hands-on SQL proficiency is a must-have. Additionally, experience in managing, securing and preparing production web environments with tools like Kubernetes is highly valued.

Responsibilities:

• Monitor, identify and analyze events from a range of sources to spot threats and respond to such incidents with a sense of urgency.
• Collaborate with globally distributed teams to accomplish tasks.
• Assist in the collection of metrics to measure the efficiency of Security Operations functions.
• Audit the effectiveness of security measures to check if the systems meet the Security compliance norms.
• Assist in implementation of security policies and procedures.
• Fine-tune of the process and eventually update standard operating procedures for the team.
• Participate in various stages of incident investigations and threat hunting engagements.

Requirements:

• Exposure to web and API security, coding standards, WAFs, advanced persistent threat actors, botnets (off the shelf and custom) and attack mitigation.
• Hands-on SQL proficiency is a must-have.
• Knowledge of managing, securing and preparing production web environments with tools like Kubernetes.
• Familiar with Threat Hunting - Web/ API, web hacking, web data analysis or WAF hands-on experience.
• In-depth knowledge of the web technology and web application security field.
• Deep understanding of the cybersecurity threat landscape, and the attacker mindset.
• Experience in scripting and programming (JavaScript, Python, etc.).
• Interest in keeping up with industry trends and market demands to recommend product enhancements and new sources of intelligence.
• Demonstrated interest in working with data and metrics as applied to security.
• Be a great collaborator and communicator, stay curious and enjoy innovating.

Nice to Have:

• Familiarity with open source analytics and visualization tools like Grafana, Apache Superset.
• Experience red-teaming, especially developing bot-nets and whitehat hacking.
• Hands on knowledge on Web security modules and secure configuration.
• Hands-on experience and proficiency in API test automation and standardization.
• Experience and solid knowledge on computer and network security.
• Integrating security into build automation, deployment automation, test automation, SDLC orchestration, environment management, monitoring, and production.
• Mentor development teams, review pull requests, and guide evolution of the development pipeline.
• Experience with modern application packaging, deployment, containerisation, bug tracking tools and other supporting tools (Jenkins, Docker, Kubernetes, etc.).
• Familiar with ISMS (ISO/IEC 27001), SOC2, NIST Cybersecurity Framework, CIS Controls and Open Web Application Security Project.