Senior Security Analyst

• Monitor and analyze security events across network, endpoint, and cloud environments using Elastic SIEM.
• Investigate and validate potential security incidents, including malware infections, phishing campaigns, unauthorized access attempts, and other malicious activities.
• Perform initial triage, classification, and prioritization of security alerts.
• Support incident response by collecting and analyzing evidence, escalating critical threats, and assisting with containment and remediation.
• Correlate logs and security events from firewalls, IDS/IPS, web servers, endpoints, and cloud platforms to identify indicators of compromise.
• Develop, tune, and optimize detection rules, dashboards, and alerts within Elastic SIEM.
• Leverage threat intelligence, including IOCs and adversary TTPs, to enhance detection capabilities.
• Document investigations, incident findings, response actions, and lessons learned.
• Produce security metrics, reports, and operational summaries for stakeholders.
• Collaborate with Security Operations, IT, and cross-functional teams on threat detection and incident response.
• Contribute to process improvements, operational procedures, and knowledge-sharing initiatives.
• Stay current on emerging threats, attack techniques, vulnerabilities, and security best practices.
• Work Sunday to Thursday or Tuesday to Saturday, day shift.
• The role can be remote/home office, with some travel required.

• Strong analytical, problem-solving, communication, and technical documentation skills.
• Ability to investigate security events, analyze findings, and communicate risks and recommendations clearly to both technical and non-technical audiences.
• Experience monitoring, investigating, and responding to security incidents within a SOC or security operations environment.
• 2+ years of experience in cybersecurity, security operations, threat detection, incident response, or a related technical role preferred.
• Hands-on experience with Elastic SIEM or comparable SIEM platforms for monitoring, investigations, alerting, and log analysis.
• Strong understanding of security operations concepts, including incident triage, threat detection, alert management, and escalation procedures.
• Knowledge of network security fundamentals, including TCP/IP, DNS, HTTP/S, SMTP, firewalls, IDS/IPS, VPNs, and common attack vectors.
• Experience performing log analysis and event correlation across endpoints, networks, cloud platforms, and security technologies.
• Familiarity with threat intelligence concepts, Indicators of Compromise (IOCs), MITRE ATT&CK, and common adversary tactics, techniques, and procedures.
• Understanding of Windows, Linux, and cloud environments, including common authentication mechanisms and security logging sources.
• Experience working with ticketing systems, case management platforms, and security documentation processes.
• Advanced English.

• Swiss Medical SMG 30 (primary family group)
• AWS certifications
• Corporate benefit program with Pedidos Ya!
• Discounts at Unilever, Samsung, BGH, Peña Flor, among others
• Discounts in educational institutions
• Internet and connectivity
• Compensation for childcare expenses (from 0 to 3 years old)
• Competitive salary and benefits
• English in company
• Work from Anywhere: You can work from all over the world
• Gifts for special dates (marriage, graduation, birthdays, etc.)
• Christmas Box
• Day off for birthdays
• 10 (ten) calendar days of paternity leave
• An awesome learning environment for you to develop
• Comprehensive group benefits
• Flexibility
• Time off when you need it
• Casual work environment