Security Analyst

• Monitor and analyze security events across network, endpoint, and cloud environments using Elastic SIEM
• Investigate and validate security incidents, including malware infections, phishing campaigns, unauthorized access attempts, and malicious activities
• Triage, classify, and prioritize security alerts based on impact and severity
• Support incident response by collecting and analyzing evidence, escalating critical threats, and assisting with containment and remediation
• Correlate logs and events from firewalls, IDS/IPS, web servers, endpoints, and cloud platforms to identify indicators of compromise
• Develop, tune, and optimize Elastic SIEM detection rules, dashboards, and alerts
• Leverage threat intelligence, IOCs, and adversary TTPs to strengthen detection capabilities
• Document investigations, incident findings, response actions, and lessons learned
• Produce security metrics, reports, and operational summaries for stakeholders
• Collaborate with Security Operations, IT, and cross-functional teams on threat detection and incident response
• Contribute to process improvements, operational procedures, and knowledge-sharing initiatives
• Stay current on emerging threats, attack techniques, vulnerabilities, and security best practices

• Strong analytical, problem-solving, communication, and technical documentation skills
• Ability to investigate security events, analyze findings, and communicate risks and recommendations clearly to technical and non-technical audiences
• Experience monitoring, investigating, and responding to security incidents within a SOC or security operations environment
• 2+ years of experience in cybersecurity, security operations, threat detection, incident response, or a related technical role preferred
• Hands-on experience with Elastic SIEM or comparable SIEM platforms
• Strong understanding of incident triage, threat detection, alert management, and escalation procedures
• Knowledge of TCP/IP, DNS, HTTP/S, SMTP, firewalls, IDS/IPS, VPNs, and common attack vectors
• Experience with log analysis and event correlation across endpoints, networks, cloud platforms, and security technologies
• Familiarity with threat intelligence, IOCs, MITRE ATT&CK, and adversary TTPs
• Understanding of Windows, Linux, and cloud environments, including authentication mechanisms and security logging sources
• Experience with ticketing systems, case management platforms, and security documentation processes
• Advanced English

• Swiss Medical SMG 30 (primary family group)
• AWS certifications
• Corporate benefit program with Pedidos Ya!
• Discounts at Unilever, Samsung, BGH, Peña Flor, among others
• Discounts in educational institutions
• Internet and connectivity
• Compensation for childcare expenses (from 0 to 3 years old)
• Competitive salary and benefits
• English in company
• Work from Anywhere: You can work from all over the world
• Gifts for special dates (marriage, graduation, birthdays, etc.)
• Christmas Box
• Day off for birthdays
• 10 (ten) calendar days of paternity leave
• An awesome learning environment for you to develop
• Comprehensive group benefits
• Flexibility and time off when you need it
• Casual work environment