Senior Security Analyst

Senior Security Analyst - Managed Detection and Response

Our mission at Bitdefender is to reduce risk to customers' business to allow them to achieve their objectives. We are focused on delivering real security value for an affordable price - no snake oil. To help in this mission, we are looking for a Senior Security Analyst. You will work in a tight knit, experienced team backed up by an international organization that's been in business for 18 years.

About the Role

• This is a full-time position in a 24/7 operation with a four 10-hour shifting schedule. Scheduled rotations for weekend shifts will be required
• Serve as an escalation point for security events from multiple sources
• Using the Cyber Kill Chain, indicators of activity and indicators of compromise with current intelligence information to proactively review customers environments searching for anomalous behavior across network, host and logs data
• Lead an Incident Response Team to investigate and remediate active threats while accurately documenting results using standard incident response techniques
• Develop analytic signatures to identify suspicious and malicious behaviors

About you

Be able to demonstrate working knowledge and understanding of the following:

• Cybersecurity principles
• Cyber threats and vulnerabilities
• Current incident response methodologies
• Current cyber investigative techniques
• Current cyber threat trends
• Computer networking concepts and protocols, and network security methodologies
• Knowledge of basic physical computer components and architectures, including the functions of various components and peripherals (e.g., CPUs, NICs, HDDs)
• Perform analysis of log files from a variety of sources (e.g., individual host logs, network traffic logs, firewall logs, and intrusion detection system [IDS] logs) to identify possible threats to network security
• Basic system administration, network, and operating system hardening techniques
• Identifying, modifying, and manipulating applicable system components within Windows, Unix, or Linux (e.g., passwords, user accounts, files)
• Conduct research, analysis, and correlation across a wide variety of all source data sets (indications and warnings)
• Defense-in-depth principles and practices (e.g., defense-in-multiple places, layered defenses, security robustness)
• Virtualization and cloud computing
• Knowledge of which system files (e.g., log files, registry files, configuration files) contain relevant information and where to find those system files
• Hacking methodologies
• Networking protocols (e.g., TCP/IP), services (e.g., web, mail, DNS), and how they interact to provide network communications
• Knowledge of encryption algorithms (e.g., Internet Protocol Security [IPSEC], Advanced Encryption Standard [AES], Generic Routing Encapsulation [GRE], Internet Key Exchange [IKE], Message Digest Algorithm [MD5], Secure Hash Algorithm [SHA]) and how they are used
• How to perform packet-level analysis using appropriate tools (e.g., Wireshark, tcpdump)
• Security Information and Event Management (SIEM) tools - Searching, aggregating, and correlating data
• Web Application Firewall (WAF)
• Regular Expressions (Regex)

#LI-RR1