Security Analyst

Location

Remote (Germany)

Type

Full Time

Salary

Competitive salary

Company overview

Longwall Security is a specialist provider of cyber security services.  We are dedicated to safeguarding digital assets for our range of high profile clients and ensuring the integrity of their data and their customers’ data.  Our team is employing innovative strategies and advanced technologies to counteract evolving cyber threats.

About the role

As a Security Analyst of Longwall Security your primary focus will be investigating customer alerts in our SIEM platform. You will also assist with tuning the platforms and identifying areas of improvement for our detection capabilities, along with opportunities for automation that you will work with the team on developing. The ideal candidate for the role will have an investigative mind and a desire to fully understand information at a forensic level. You will also have strong report writing skills and the ability to visualise data in a clear manner suitable for an audience with a range of technical abilities. Alongside this task you will also be on hand to assist our client base with security queries, vulnerability management and provide assistance to our support engineers when required.

Key responsibilities

  • Investigate alerts in SIEM platform and work alongside clients to determine if false positives or malicious activity
  • as well as identify improvements that could be recommended to client to harden their environments.
  • Tune the platform to remove false positives, add new detection rules and identify new features and improvements that can be made.
  • Proactive threat hunting in client environments looking for hidden threats.
  • Create data visualisations for clients to demonstrate the effectiveness of their controls and assist in threat hunting.
  • Utilise our SOAR platform to identify automation that we can bring in and work with the team to implement this.
  • Perform initial breach analysis and forensics for incidents – collating all data and ensuring that timeline is accurate ready for incident report.
  • Assist customers with vulnerability management queries.
  • Provide assistance and advice to support engineers when required.
  • Be an active member of the Longwall team, making constructive suggestions for improvement and opportunities.
  • Other duties as required to meet Longwall’s organisational goals

Essential skills

  • Working in a technical support environment at 2nd line or above
  • Experience in investigating alerts in a SIEM platform
  • Experience in implementing or supporting security technologies such as endpoint antivirus, encryption or cloud security functions.
  • Experience within a Cyber Security role.
  • Understanding of security concepts and principals.
  • Understanding of variety of attack vectors
  • Ability to build trusting relationships with clients and colleagues.
  • Strong communication and documentation skills.
  • Understanding of various operating systems at a system level.
  • Continuous self-improvement; desire to learn new skills.
  • Focus on quality; detail oriented; right first time.
  • Team player; willing to support others and be supported.
  • Entitlement to work in Germany.

Licenced to drive in Germany.

Desirable skills

  • 12 months or more proven work experience in IT Managed Services.
  • Experience working in a change controlled environment
  • Understanding of business requirements.
  • Highly organised; process driven; self-documenting.
  • Azure Fundamentals, AWS Cloud Practitioner
  • MCSE, CCNA, CC (ISC2), Security+
  • Vendor specific cyber security qualifications.

Benefits

  • 30 days annual leave entitlement
  • Company pension
  • Hybrid working
  • Flexible shift working

Apply for this role

Accepted file types are: pdf, doc, docx.