Senior Cyber Security Analyst

Sigma SoftwareCybersecurity

Workplace type: remote; Country code: PLFull-TimeSenior

Salary not disclosed

Apply NowOpens the employer's application page

Job Details

Experience: 3–5 years of experience in Cybersecurity, Threat Research, or Threat Intelligence
Required Skills: SQLCybersecurityJavascriptKibanaSnowflake

Have 3–5 years of experience in Cybersecurity, Threat Research, or Threat Intelligence.
Hold a bachelor’s degree in Computer Science, Cybersecurity, Information Security, or a related field.
Understand web technologies and networking fundamentals, including HTTP/HTTPS, TCP/IP, DNS, authentication, cookies, and browser-server interactions.
Have experience in web security research, bot management, fraud detection, or related domains.
Have hands-on experience with threat investigations, IOC analysis, and threat intelligence research.
Have experience with log analysis and investigation platforms such as Kibana/OpenSearch, Snowflake, or Datadog, or similar tools.
Have strong SQL skills, including experience working with large datasets and UDFs.
Have basic JavaScript knowledge for web and client-side analysis.
Be able to work independently and manage investigations with minimal supervision.
Knowledge of MITRE ATT&CK, malware analysis, vulnerabilities, and adversary TTPs is a plus.
OSINT and cyber threat intelligence research experience is a plus.
Python, Jupyter Notebook, GitHub, and version control workflow experience are a plus.

Monitor and investigate potential security threats using Kibana/OpenSearch and Snowflake.
Analyze security logs and investigate suspicious activity, including traffic spikes and changes in attack patterns or signals.
Determine whether detected activity is malicious or benign and identify appropriate responses, including detection engineering when needed.
Develop, tune, and deploy detection rules using traffic behavior, HTTP request attributes, headers, device fingerprints, and other indicators.
Monitor existing detections and attack patterns and identify unusual changes in volume, sources, IPs, domains, or other indicators.
Analyze web application traffic flows and configure baseline detection and protection rules to support customer onboarding.
Investigate customer-reported incidents and missed detections, analyze attack traffic, and implement mitigations.
Document newly discovered threats and attacks, including evidence, findings, and indicators.
Communicate findings and technical details to Engineering and other stakeholders to support remediation and improvements.
Work with customer counterparts through a ticketing system and support portal to investigate issues and resolve security-related requests.

View Full Description & ApplyYou'll be redirected to the employer's site