SIEM Engineer
Limassol, Cyprus
capital.com
Die Investment-App für clevere Anleger. Finanzinstrumente, Online-Handel mit CFDs, Finanzkurse und Anlagemöglichkeiten – alles buchstäblich in einer Hand.As a Security Operations | SIEM Engineer, you will be responsible for Detection & Response infrastructure, Threat Intelligence, SIEM Integrations, establishing new rules and implementing tools for security monitoring at the infrastructure level.
Responsibilities:
- Develop, manage and maintain a SIEM system and related tools for security event monitoring, alerting and incident analysis
- Configure and optimise the process of data collection, correlation, and analysis from various sources (systems, applications, networks)
- Develop and implement rules to detect potential threats and anomalies
- Participate in responding (escalation) to information security incidents, investigate threats, and prepare recommendations
- Participate in the configuration of SIEM integration with various security systems (EDR, Firewall, IDS/IPS, etc)
- Continuously improve monitoring and analytical processes based on best practices in information security
- Ensure compliance with internal security policies and regulatory requirements (PCI DSS, ISO 27001, GDPR, etc.)
- Develop and maintain internal documentation (document procedures, best practices and go-forward solutions to ensure effective knowledge sharing and improvement of existing tools and processes)
General Requirements:
- 3+ years proven experience in the field of information security and defensive security-related roles
- Knowledge of/experience with international information security standards, methodologies and frameworks: ISO 27001, PCI DSS, GDPR, NIST, MITRE, CIS Controls/Benchmarks, etc.
- A Bachelor’s degree is strongly preferred, specifically in Information Security, Information Technology, Computer Science or a related field
- Relevant information security certifications are a plus
Skill Requirements:
- Strong knowledge of information security: fundamental concepts, architectures, tools, processes and operations (monitoring, IR, TI, TH, etc), information security threats and vulnerabilities, and countermeasures and associated operational best practices
- Hands-on experience with network (firewalls and IDS/IPS systems) and endpoint security (Operation systems and EDR/EPP), security alert triage, event logs, writing correlation rules, and creating dashboards
- Knowledge, practical skills and experience with security monitoring tools/systems
- Experience with building, configuring, and managing SIEM and related tools
- Experience with container environments, virtualisation and message brokers
- Experience with various APIs and scripting (Bash, Shell, Powershell, Python, Ruby)
- Basic knowledge of ethical hacking methods and penetration testing
- Experience with security automation tools (SOAR), automation systems (IaC) and understanding CI/CD is a plus
What you get in return:
- You will join the company, that cares about work and life balance
- Annual Bonus based on the performance review cycle
- Generous Annual Leave Policy
- Medical Insurance and Pension fund, with additional benefit packages based on the location
- Hybrid working model with full flexibility
- Possibility of taking two additional days of paid leave per year to dedicate to volunteering efforts.
* Salary range is an estimate based on our InfoSec / Cybersecurity Salary Index 💰
Tags: APIs Automation Bash CI/CD Compliance Computer Science EDR Endpoint security Ethical hacking Firewalls GDPR IDS IPS ISO 27001 Monitoring NIST PCI DSS Pentesting PowerShell Python Ruby Scripting SIEM SOAR Threat intelligence Vulnerabilities
Perks/benefits: Medical leave Salary bonus
Explore more career opportunities
Find even more open roles below ordered by popularity of job title or skills/products/technologies used.