Security Analyst

About the role

The team covers the full spectrum of security events, from phishing and identity threats to cloud misconfigurations and product security incidents, operating with a follow-the-sun model.

What you'll do

• Monitor, triage, and investigate security alerts across SIEM, EDR, email security, identity, and cloud platforms using CrowdStrike NGSIEM, Splunk, and related tooling
• Lead incident response from initial triage through containment, eradication, recovery, and post-incident review
• Partner with the Incident Response team to address security incidents and provide timely support
• Work proactively with Cyber Threat Intelligence to gather actionable intelligence and respond effectively to incidents
• Collaborate closely with the Detection Engineering team to develop new detection and reduce false positives

What you need

• 3–6 yrs of experience
• SIEM
• Incident response
• EDR
• Splunk
• IAM
• Python
• Any graduate

Good to have

• AWS
• GCP
• Azure
• PowerShell
• Cloud security