Cyber Security Analyst

🔥 2 hours ago

🇷🇴 Romania – Remote

⏰ Full Time

🟡 Mid-level

🟠 Senior

🔐 Security Analyst

👻 Ghost score 23%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

TechBiz Global

WebsiteLinkedInAll Job Openings

51 - 200 employees

📣 Marketing

📦 Logistics

🎯 Recruiter

Marketing • Logistics • Recruitment

TechBiz Global is a leading recruitment and software development company that specializes in connecting businesses with top-tier talent across 28+ countries. They serve clients from startups to major enterprises, providing expertise in hiring key roles in industries such as FinTech. In addition to talent acquisition, TechBiz Global offers comprehensive software development services to turn clients' visions into reality, powering digital transformations with expert engineers. The company also provides strategic CTO consulting services and flexible outstaffing and outsourcing solutions, helping businesses manage growth and optimize technology processes. Recognized as a top IT recruitment and consulting firm, TechBiz Global is dedicated to delivering personalized and innovative solutions to its clients, ensuring they have the tools necessary for success.

📋 Description

• Provide client-facing support for 24x7 managed security services • Adhere to and develop operational processes and frameworks • Work assigned shifts and cover alternate shifts as needed • Analyze, escalate, and assist with remediation of critical information security incidents • Integrate, deploy, onboard, and manage endpoint defense and attack surface management customers • Monitor alerts in real time and analyze security event data from network and endpoint environments, peer analysts, customer platforms, and other sources • Provide incident response support and remediation guidance to customers • Review and improve procedures for cyber threat intelligence, monitoring, incident response, attack surface reduction, and automated actions • Write security orchestration, automation, and response playbooks using security operations tools and scripting languages • Create, maintain, and manage automated playbooks for common information security threats and client-specific environments • Identify improvements within Security Operations Center and Cyber Incident Response processes • Integrate new security platform functionality with existing systems and automated processes • Create documented code, scripts, processes, and service documentation • Perform health checks and optimization activities on client security technologies and systems • Determine information security risk and facilitate remediation of vulnerabilities and security risks across the enterprise

🎯 Requirements

• 4+ years of IT experience • 3+ years of Cyber Security experience • Advanced operating systems experience in at least two of Microsoft, MacOS, and Linux • General network security and troubleshooting knowledge • Foundational scripting knowledge in PowerShell, Python, or Bash preferred • In-depth knowledge of TCP/IP, UDP, DNS, FTP, SSH, SSL/TLS, and HTTP protocols • Knowledge of network analysis and network/security applications • Good knowledge of common malware threats and attack methodologies • Knowledge of malware and threat analysis • Incident management experience • Ability to work under general to minimal supervision • 3+ years of experience with endpoint security tools preferred, including Trellix ePO, Trellix ENS, Trellix EDR, Trellix HX, CrowdStrike, Microsoft Defender, Microsoft ATP, or SentinelOne • 3+ years managing security endpoints preferred • 3+ years of experience with SIEM management and tuning preferred, including LogScale/Humio, Splunk, Trellix Helix, Trellix ESM, Azure Sentinel, Elastic SIEM, Chronical, or Devo • Experience with Windows patch management tools is a plus • Experience creating detection rules in one or more SIEM technologies preferred • Certifications such as CEH, CRISC, CISA, CGEIT, CISSP, CIPP, GMON, GHIA, or GCIH are a plus • Excellent knowledge of security methodologies, including Cyber Kill Chain, Diamond Models, and MITRE ATT&CK framework • Bachelor's Degree in Math, CS, or Engineering preferred

🏖️ Benefits

• Managed cyber security services role • 24x7 managed security services coverage • Opportunity to grow in an innovative environment