(Senior) Cyber Security Analyst (all genders)
Core
Lead complex security incidents and serve as the escalation point for an external MSSP partner within a co-managed Security Operations Center.
Role type
Senior IC Cyber Security Analyst (Incident Response & SOC)
Builds
Incident response playbooks, detection use-cases, and automated response processes (SOAR)
Domain
Cybersecurity / Critical Infrastructure (KRITIS/NIS2)
Required skills
Incident response leadership, SIEM/EDR operations, threat hunting, vulnerability assessment, network security, Linux, Python/PowerShell scripting, cloud security (Azure/AWS/GCP)
Preferred skills
GCIH/GCFA/CySA+ certifications, MSSP collaboration experience, vulnerability management
Technologies
SIEM, XDR, SOAR, Python, PowerShell, Azure, AWS, GCP, Linux
Responsibilities
Evaluate and quality-assure 24/7 monitoring by MSSP partner, lead Tier-2/3 incident escalations, coordinate complex incidents with external forensics/IR retainers, conduct proactive threat hunting, optimize detection use-cases and automated response processes, assess technical vulnerabilities and initiate remediation, mentor analysts and exchange knowledge with MSSP partner
Seniority
Senior, hands-on IC