Descrição da Função
Dellent is a consulting company focused in System Information and Telecommunications. Our goal is to help our candidates and consultants to take a step forward in their careers through projects that meet their needs and expectations. In this project, you will be able to contact with one of the key players in banking in the EU and around the world.
Thus, you will be part of a multicultural team that is spread across more than 50 countries and you will help develop solutions in one of these three areas: investments, business solutions, or commercial/personal services. We are looking for a L2 Analyst to work in this project in Porto.
Requirements:
Previous experience working with event, incident monitoring and response;
Knowledge of logs analysis and endpoints security;
Experience with Python as a scripting language;
Experience with SIEM (Security Information Event Monitoring), SOAR (Security Orchestration, Automation and Response), and DLP (Data Loss Prevention);
Protocol knowledge;
Fluent in English.
Responsibilities:
Handling of cyber-investigations provided by CyberSOC use-cases and DLP detection systems;
Analyze the effectiveness of existing DLP controls and continuously seek improvement in technical/functional and process;
Contribute to CyberSOC use-case development and optimization;
Monitor DLP related events, conduct investigations, and respond to data leakage incidents according to internal procedures;
Develop and enhance data protection policies and rules across the various systems, manage exceptions;
Respond to and facilitate eDiscovery requests;
Maintain accurate and detailed records of incidents;
Assist in governance by delivering detailed reports and KPIs;
Contribute to cybersecurity governance;
Quickly escalate complex incidents to Level 3 Analysts, ensuring that all relevant data and preliminary findings are accurately communicated to facilitate further analysis;
Contribute to industrialization/formalization of Cyber Defense processes and effectiveness;
Provide analysis and expertise on cyber-incidents, including root-cause by identifying preventive measures.
We offer:
Health insurance;
A personalized training plan, with a budget to spend on the training and technical books you find necessary;
Constant feedback so you can grow professionally;
Remote onboarding process;
Team events every semester so you can live new adventures;
Culture of proximity and transparency.
Your ideas and needs are heard and valued by us!
Localização:
Porto, Portugal
#J-18808-Ljbffr