Security Analyst

New

Netrix GlobalCybersecurity services

Buenos Aires, Argentina (Any part of the country it is great for us)Full-TimeJunior

Salary not disclosed

Apply NowOpens the employer's application page

Job Details

Languages: Advanced English.
Experience: 2+ years of experience in cybersecurity, security operations, threat detection, incident response, or a related technical role preferred.
Required Skills: Linux

Have experience monitoring, investigating, and responding to security incidents in a SOC or security operations environment.
Bring hands-on experience with Elastic SIEM or comparable SIEM platforms for monitoring, investigations, alerting, and log analysis.
Understand security operations concepts, including incident triage, threat detection, alert management, and escalation procedures.
Know network security fundamentals, including TCP/IP, DNS, HTTP/S, SMTP, firewalls, IDS/IPS, VPNs, and common attack vectors.
Have experience with log analysis and event correlation across endpoints, networks, cloud platforms, and security technologies.
Be familiar with threat intelligence, indicators of compromise, MITRE ATT&CK, and adversary tactics, techniques, and procedures.
Understand Windows, Linux, and cloud environments, including authentication mechanisms and security logging sources.
Have experience with ticketing systems, case management platforms, and security documentation processes.
Have strong analytical, problem-solving, communication, and technical documentation skills.
Be able to communicate risks and recommendations to technical and non-technical audiences.
Have advanced English.
Have 2+ years of experience in cybersecurity, security operations, threat detection, incident response, or a related technical role preferred.
Be available for a Sunday-to-Thursday or Tuesday-to-Saturday day shift.

Monitor security events across network, endpoint, and cloud environments using Elastic SIEM.
Investigate and validate potential incidents, including malware, phishing, and unauthorized access attempts.
Triage, classify, and prioritize security alerts based on impact and severity.
Collect and analyze evidence, escalate critical threats, and assist with incident containment and remediation.
Correlate logs from firewalls, IDS/IPS, web servers, endpoints, and cloud platforms to identify indicators of compromise.
Develop and optimize Elastic SIEM detection rules, dashboards, and alerts.
Use threat intelligence, indicators of compromise, and adversary tactics to improve detection.
Document investigations, findings, response actions, and lessons learned.
Produce security metrics, reports, and operational summaries for stakeholders.
Collaborate with Security Operations, IT, and other teams on threat detection and incident response.

View Full Description & ApplyYou'll be redirected to the employer's site