Mid-level Information Security Analyst – Detection, SIEM, Perimeter, NGFW

Job not on LinkedIn

🔥 13 minutes ago

Apply Now

Find Similar Remote Jobs

Receive Emails For Remote Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Portobello

WebsiteLinkedInAll Job Openings

1 - 10 employees

Founded 2020

A new type of game – a game that promotes circular economy, provides a fun experience, and a marketing and consumer analytics platform – all in one!

📋 Description

• Operate and support the maintenance of the SIEM platform, ensuring correct collection of log sources, and the integrity and quality of received data. • Support the creation, review and fine-tuning of detection rules and use cases to reduce false positives and optimize alerts. • Operate and administer Next-Generation Firewalls (NGFW): controlled implementation of access rules, NAT, VPNs, justification documentation, and periodic review of orphaned rules. • Actively support network segmentation activities, traffic rules, and perimeter hardening. • Monitor, classify and investigate security alerts generated by the SIEM, firewalls and other perimeter tools. • Perform triage and initial analysis of perimeter security incidents, carrying out structured escalation to a Specialist when necessary. • Produce operational reports, traffic maps and indicators of security incidents/blocks. • Create and keep up-to-date technical documentation of topologies, network flows and operational procedures (SOPs).

🎯 Requirements

• Professional experience in Information Security, Networking, IT Infrastructure or related fields with a focus on security. • Hands-on experience in monitoring, log triage and routine operation of SIEM platforms. • Experience in operating and administering Next-Generation Firewalls (Check Point, Palo Alto, Fortinet or equivalents). • Solid practical knowledge of TCP/IP networking, routing, network segmentation (VLANs, DMZs) and communication protocols. • Knowledge of detection rules, event correlation and log header analysis. • Familiarity with Windows and Linux environments. • Proven technical analysis skills and diligence in documenting activities. • Strong analytical ability, attention to detail and investigative mindset. • Organization and discipline to follow Change Management processes. • Good communication skills for interacting with infrastructure, telecom teams and external partners. • Proactivity and interest in continuous technical development in SecOps. • Specific experience with Wazuh, Elastic Stack (ELK) or other open-source SIEM platforms. • Practical knowledge of detection rules mapped to the MITRE ATT&CK framework. • Basic understanding of Identity and Access Management (IAM) and Active Directory structure. • Knowledge of ISO/IEC 27001 and CIS Controls frameworks. • Basic scripting skills (Python, Bash or PowerShell) for automating log analysis. • Entry-level security or networking certifications (e.g., Security+, CCNA, NSE 4 Fortinet, CCSA Check Point).

🏖️ Benefits

• Life insurance; • Health and dental plans; • Portobello Corporate University platform; • Profit Sharing (PPR); • Discounts at local pharmacies; • Private pension plan; • Union membership; • Discount network – partnerships with various educational institutions; • Discounts on Portobello product purchases; • Vacation bonus; • 'Portobello Mom' allowance – for baby layette purchases; • Nursery assistance; • Support for dependents with disabilities (PCD); • Professional training and development programs; • Wellhub and many more!!!