Description

You will monitor and analyze security events across SIEM software, network/host-based IDS, application logs, and databases. You will triage incoming alerts to assess priority, determine risk, and execute responses. You will create technical tickets and escalate findings to senior analysts and developers. You will conduct proactive threat hunting and log research while maintaining awareness of the threat landscape within the crypto and financial sectors. You will work within a 24/7/365 rotating shift schedule, including nights and weekends.

Responsibilities

• Monitor and analyze security events across SIEM, IDS, application logs, and databases.
• Triage alerts to assess priority, determine risk, and execute immediate responses.
• Create technical tickets and escalate complex findings to senior analysts and developers.
• Conduct proactive threat hunting and deep-dive log research.
• Maintain awareness of the threat landscape within the crypto and financial sectors.

Required Skills

• 10+ years of experience in cybersecurity or similar security operations roles.
• Hands-on experience with SIEM systems and information and event management.
• Proficiency with Mac OS, Windows, and Unix/Linux environments.
• Experience with Amazon AWS and cloud architectures.
• Knowledge of network structures and application security maintenance.
• Experience using Wireshark, Fireblocks, Nessus, and Kibana/Elasticsearch.
• Ability to document technical topics clearly in English.
• Experience working within globally distributed teams.

Key Skills

Education

ANY GRADUATE