Description

You will monitor, triage, and respond to security events across SIEM, IDS, and application logs in a 24/7/365 rotating shift environment.

This role is remote.

Responsibilities

• Monitor and analyze security events across SIEM, network/host-based IDS, application logs, and databases.
• Triage incoming alerts to assess priority, determine risk, and execute immediate responses.
• Create technical tickets and escalate complex findings to senior analysts and developers.
• Conduct proactive threat hunting and deep-dive log research.
• Maintain awareness of the threat landscape within the crypto and financial sectors.

Required Skills

• 10+ years of experience in cybersecurity or similar security operations roles.
• Hands-on experience with SIEM systems and information and event management.
• Proficiency with Mac OS, Windows, and Unix/Linux environments.
• Experience with Amazon AWS and cloud architectures.
• Knowledge of network structures and application security maintenance.
• Experience using Wireshark, Fireblocks, Nessus, and Kibana/Elasticsearch.
• Ability to document technical topics clearly in English.
• Experience working within globally distributed teams.

Key Skills

Education

ANY GRADUATE