Senior Security Analyst

Senior Security Analyst at hCaptcha in United States.

Role Summary

This is a remote position.

Responsibilities

• Monitoring, identifying and analyzing events from a range of sources to spot threats and respond to such incidents with a sense of urgency
• Collaborating with globally dispersed teams to accomplish tasks
• Assisting in the collection of metrics to measure the efficiency of Security Operations functions
• Auditing the effectiveness of security measures to check if the systems meet the Security compliance norms
• Assisting in implementation of security policies and procedures
• Fine-tuning of the process and eventually updating standard operating procedures for the team
• Participating in various stages of incident investigations and threat hunting engagements
• Working closely with internal company teams (such as Product, Customer Success, etc.)

Requirements

• Must have a solid exposure to web, API security, coding standards, WAFs advanced persistent threat actors, botnets (off the shelf and custom) and attack mitigation.
• Knowledge in managing, securing and preparing production web environments
• Familiar with Threat Hunting - Web/ API, web hacking, web data analysis or WAF hands-on experience.
• Have an in-depth knowledge of the web technology and web application security field.
• Have a deep understanding of the cybersecurity threat landscape, and the attackers mindset.
• Have experience in scripting and programming (JavaScript, Python, etc.)
• Show an interest in analysing industry trends and market demands to recommend product enhancements and new sources of intelligence
• Demonstrate an interest in working with data and metrics as applied to security with respect to large data sets
• Be a great collaborator and communicator, be curious and want to innovate

Nice to Have

• Experience developing bot-nets and whitehat hacking
• Hands on knowledge on Web security modules and secure configuration
• Hands-on experience and proficiency in API test automation and standardisation
• Experience and solid knowledge on computer and network security
• Must have practical experience managing Agile Release Management and maintaining a scalable SDLC
• Strong knowledge on Role Based Access Control (RBAC) for Web applications
• Integrating security into build automation, deployment automation, test automation, SDLC orchestration, environment management, monitoring, and production
• Mentor development teams, review pull requests, and guide evolution of the development pipeline
• Experience with modern application packaging, deployment, containerisation, bug tracking tools and other supporting tools ( Jenkins, Docker, Kubernetes, etc.)
• Familiar with ISMS (ISO/IEC 27001), SOC2, NIST Cybersecurity Framework, CIS Controls and Open Web Application Security Project