Cyber Security Analyst L2/L3 (Incident Response) - Immediate Start Praha

REMOTE JOB WITHIN CZECH REPUBLIC


Your Role: Be part of a dynamic, talent-oriented, and engaging Corporate Cybersecurity team! In this role, you will be triaging, analysing, and remediating security incidents, while maintaining technical documentation and delivering detailed investigation and analysis reports.

You'll be on the front lines of cybersecurity, constantly monitoring security events and alerts that come in from various sources. When an issue is identified, you'll quickly execute predefined incident response playbooks to contain and address the situation. To truly understand what's happening, you'll collect, correlate, and analyze additional data, allowing for thorough incident analysis and an effective response. You'll also play a key part in supporting incident reporting to both internal teams and external stakeholders, ensuring everyone is informed. Finally, you'll collaborate with senior analysts, improving playbooks in both IT and OT, contributing to the ongoing effort to improve and strengthen security processes.

Who you are

* previous experience in a SOC, incident response or cybersecurity in general
* experience with SOAR, SIEM, and EDR solutions
* knowledge of Windows and Linux operating systems
* strong analytical skills in threat, vulnerability, and intrusion detection analysis
* understanding of threat vectors as well as attacker techniques and tactics
* being a highly motivated individual with the ability to self-start, prioritize, and multi-task
* being able to react quickly, decisively, and deliberately in high stress situations
* strong verbal/written communication and interpersonal skills
* nice to have - one or more widely recognized security certifications from renowned institutions such as GIAC/SANS, EC-Council, etc.

Service-related expert knowledge

* knowledge of incident handling, protection of systems, networks, applications and data
* confident handling of artifacts, IoCs and threat intelligence
* case management experience and tools
* experience with EDR and SIEM tools
* alert triage and investigation, applying knowledge of the environment, understanding of the attack chain, and initial impressions of alerts to prioritize, validate, and investigate alerts
* case management classification and initial validation, documenting relevant details and observables



Cyber security and technical knowledge

* experience with operating system security (Linux and Windows), anti-virus technologies and network security
* working knowledge of common TCP/IP based services and protocols such as DNS, DHCP, HTTP, FTP, SSH, SMTP, etc.
* knowledge about firewalls, proxies/reverse proxies, IDS/IPS
* knowledge of operating systems
* ability to read and understand network and endpoint logs
* knowledge of system and application security threats and vulnerabilities (e.g., buffer overflow, cross-site scripting, etc.)consideration of laws, regulations, policies, and ethics (GDPR, etc.)
* skills in writing queries for security and investigative tools
* skills in applying incident handling best practices

jak se přihlásit
Pokud Vás tato nabídka práce zaujala, reagujte prosím na tento inzerát. Jakmile dostaneme Vaši odpověď, budeme Vás kontaktovat a informovat o dalším průběhu.
Máte doplňující otázky? Neváhejte nás kontaktovat.
Přejeme Vám hodně úspěchů ve výběrovém řízení a těšíme se na další spolupráci.

Pokud si chcete prohlédnout kompletní nabídku otevřených pozic, navštivte www.randstad.cz.