Threat Analyst (Detection & Response Team)
Security
Threat Analyst (Detection & Response Team)
F-secure
Poznań
Type of work
Undetermined
Experience
Mid
Employment Type
Permanent
Operating mode
Office
Tech stack
Windows
Networking
Windows Administration
Network Administration
Cybersecurity
vulnerabilities
Monitoring systems
Linux
Mac OS
Job description
Online interview
We are now looking for technically skilled individuals to join the Detection and Response Team in Poznan (Poland). The team works on the front line of our MDR service, which is one of the company's strategic initiatives. As a member of the team, you will be responsible for initial triage, in-depth analysis and responding to incidents. The job is done in shifts in order to provide 24/7 service to our customers.
RESPONSIBILITIES:
RESPONSIBILITIES:
- Monitoring security events from multiple data sources, results analysis, and escalation for remediation. The events will originate from, various sources including but are not limited to DLP, IDS/IPS, antivirus, firewalls, and system security logs.
- Gathering additional facts necessary for troubleshooting and resolving the issues, create action plans, implementing them and observing results
- Developing custom security use cases for the monitoring platforms.
- Identify systems misconfigurations and work with customers to correct them
- Monitor external security blogs, articles, reports, as well as other security intelligence sources to aggregate the data and continuously integrate into the SIEMs
- Building new tools and techniques which automated human-intensive tasks
- Interacting directly with the customers and other teams within F-Secure, therefore very good English (written and spoken) is expected.
Skills & Requirements
- Knowledge of networking technology, stacks, and protocols (including but not limited to network protocols, routing, switching, typical network design), typical services network flow, operating systems details, vulnerabilities, and attacks
- Knowledge about networking devices (routers, switches, appliances such as firewall/IDS/IPS)
- Windows / Linux operating system internals knowledge (with security focus)
- Passion for information security
- Very good English skills (spoken and written)
- Good team player
- Attention to details with emphasis on accuracy and quality with a structured way of working
- Ability to communicate technical information, often in the form of verbal and visual operational updates, situation reports and briefings.
Following qualifications are seen as a plus:
- Penetration tester history sysadmin or netadmin background
- Basic practical skills in at least one of high level programming language (e.g. C/C++/C#, Java) or scripting language such as Perl, Ruby, PHP, Python, Bash
- Information security, networking technology or operating system related trainings or certificates
At F-Secure, we work hard to bring efficient solutions and services to our customers –and we work together to do so. As an F-Secure Fellow, you’ll be joining a tight-knit network of 1,700 colleagues, spread over 25 offices around the world.
We offer flexibility in the workplace and a vibrant and international company culture with the best expertise and a diverse range of paths towards success and career growth.
Our work culture is goal-oriented and dynamic yet informal. You'll be working with great people who care. And of course, we offer a competitive salary and benefits including health care, life insurance, remote working, company supported sports activities, training budget, English classes and many more things to keep our best asset – people - happy!