Position: Security Analyst
Company: Avenga
Category: Security
Experience required: 3y
English level: upper
Published: 2022-03-01T00:00:00+02:00

You will be involved in a project that is an online food ordering platform used by many of the USA’s largest restaurant chains, reaching millions of consumers.

We want people who are passionate about finding risks, analyzing the related data, and collaborating on the right strategic risk mitigation measures. Reducing risk while enabling and supporting innovation.
Reporting to the Director of Security Engineering the Security Analyst will triage and respond to adversarial attacks while still maintaining up-time of our systems and protecting the data of our clients and their customers.


Skills and Qualifications:
3+ years of Information Technology experience with a focus on Security;
Previous Blue Team or Security Operations experience;
Knowledge of information technology, evolving threats, attack patterns, incident response, and cyber security standards;
Adept at analyzing security events to discern events that qualify as legitimate security incidents as opposed to non-incidents. This includes security event triage, incident investigation, implementing countermeasures, and conducting incident response;
Experience with protecting internet-facing applications;
Hands-on experience with SIEM platforms;
Understanding of network and application vulnerabilities;
Ability to work on-call, during critical incidents, or to support coverage requirements;
Strong English writing and verbal communication skills;
Familiarity and experience with PCI security requirements and expectations;
Upper-Intermediate level of English.


Responsibilities:
Actively hunt for threats and risks to proactively detect and mitigate advanced threats;
Detect and defend against attacks by analyzing security-related events and alerts, and assisting with incident response, remediation, and mitigation activities;
Utilize processes, tools, and techniques for detecting, addressing, and preventing fraudulent activities;
Develop new alerts and content in SIEM;
Create and maintain runbook documentation;
Ensures incident reports are accurate, detailed, actionable, and meet service level objectives;
Participate in a 24/7 on-call rotation;
Assist with security services which include but is not limited to security support;
Requests, risk assessments, vendor assessments, PCI and SOC audit support, and service provider management.