Senior Cyber Security Analyst

🔥 42 minutes ago

🌐 Germany, Poland – Remote

🇩🇪 Germany – Remote 🇵🇱 Poland – Remote

⏰ Full Time

🟠 Senior

🔐 Security Analyst

👻 Ghost score 10%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Sigma Software Group

WebsiteLinkedInAll Job Openings

1001 - 5000 employees

Founded 2002

💼 Consulting

🏥 Healthcare

🚘 Automotive

Consulting • Healthcare • Automotive

Sigma Software Group is a multinational company, established in 2002, that specializes in providing high-quality software development, graphic design, testing, and support services. The company focuses on delivering solutions across various industries such as automotive, telecommunications, aviation, advertising, gaming, banking, real estate, and healthcare. Sigma Software values professional growth, offers remote work opportunities worldwide, and caters to world-renowned clients like AstraZeneca, Scania, and SAS. The company emphasizes a culture of continuous education, mentorship, and flexible work environments, making it a preferred workplace for IT specialists aiming to work on complex solutions utilizing cutting-edge technologies. Sigma Software is committed to innovative solutions and engineering the future while also contributing to social causes such as charitable work in Ukraine.

📋 Description

• Monitor and investigate potential security threats using Kibana/OpenSearch and Snowflake • Analyze security logs and investigate suspicious or unusual activity, including traffic spikes, attack-pattern changes, and new or disappearing attack signals • Determine whether detected activity is malicious or benign and identify appropriate responses • Develop, tune, and deploy detection rules using traffic behavior, HTTP request attributes, headers, device fingerprints, and other indicators • Monitor existing detections and known attack patterns for changes in volume, sources, IPs, domains, and other indicators • Support customer onboarding by analyzing web application traffic flows and configuring baseline detection and protection rules • Investigate customer-reported incidents and missed detections, analyze attack traffic, and implement mitigations • Document newly discovered threats and attacks, including evidence, findings, and indicators • Communicate findings to Engineering and stakeholders to support remediation and improvements • Partner with counterparts through ticketing and support portals to investigate issues, provide updates, and resolve security-related requests

🎯 Requirements

• 3–5 years of experience in Cybersecurity, Threat Research, or Threat Intelligence • Bachelor’s degree in Computer Science, Cybersecurity, Information Security, or a related field • Strong understanding of web technologies and networking fundamentals, including HTTP/HTTPS, TCP/IP, DNS, authentication, cookies, and browser-server interactions • Experience in web security research, bot management, fraud detection, or related domains • Hands-on experience with threat investigations, IOC analysis, and threat intelligence research • Experience with log analysis and investigation platforms such as Kibana/OpenSearch, Snowflake, Datadog, or similar tools • Strong SQL skills, including working with large datasets and UDFs • Basic knowledge of JavaScript for web and client-side analysis • Strong analytical and problem-solving skills • Ability to work independently and manage investigations with minimal supervision • Strong communication and collaboration skills • Passion for cybersecurity and continuous learning • Knowledge of MITRE ATT&CK, malware analysis, vulnerabilities, and adversary TTPs • OSINT and cyber threat intelligence research experience • Python and Jupyter Notebook experience for investigations and automation • Experience with GitHub and version control workflows

🏖️ Benefits

• Remote work available • Full-time employment