Cyber Analyst ( French Speaker )
在 TechBiz 全球，我们正在为我们的顶级客户提供招聘服务。目前我们正在寻找一个高度主动和细节化的网络分析师加入我们的客户团队之一。如果你在创新环境中发展的令人兴奋机会，这可能是适合你的最佳选择。工作责任 ·监控和管理 EDR （终点检测和响应）和 XDR （扩展检测和回复）平台以实时识别，分析和应对安全威胁。· 在安全运营中心 (SOC) 环境中进行持续的安全监测，处理来自终端点，网络和云基础设施的大批警报。·分析安全日志，警报和远程数据以检测可疑活动，恶意软件和潜在泄露事件。·根据已建立的事件响应程序和升级路径调查，对安全事件进行调查，分类并作出反应。·开展威胁分析和根源调查以确定影响，范围和补救行动。·与 SOC 团队成员和其他 IT/安全团队合作控制，解决和预防重复事故。· 保持准确的事件记录，并确保在票行系统中进行适当案例管理。· 每日和每周制作安全报告，总结警报，事故，趋势以及对管理层和利益相关者应对行动。·不断调整和优化检测规则，警报和工作流程，以减少虚假阳性和提高检测效率。· 了解新兴威胁，攻击技术和业内最佳实践来增强整体安全姿态。要求。· 熟练使用 EDR/XDRpoint 平台进行持续终端监控，行为分析和 SIEM 工具之间的事件相关性。· 网络协议，日志 （Syslog,Windows 事件）,脚本编写 (PowerShell) 和网络威胁智能 (CTI) 的知识 · 在网络安全，IT 或相关领域的学士学位和士学位 (Bac+3) 以及供应商特定 ESET,Tellix,Barracuda,SentinelOne,Fortigate 等认证。· 2-5年在 SOC 级1/2角色中，并通过 EDR/XDR 控制台进行实践对警告测试以最大限度减少噪音。·继续培训针对威胁 (EDR,XDR,MDR) 来提高高级水平。
查看英文原文
At TechBiz Global, we are providing recruitment service to our TOP clients from our portfolio.
We are currently looking for a highly proactive and detail-oriented Cyber Analyst to join one of our clients' teams. If you're looking for an exciting opportunity to grow in a innovative environment, this could be the perfect fit for you.
Job Responsibilities
- Monitor and manage EDR (Endpoint Detection and Response) and XDR (Extended Detection and Response) platforms to identify, analyze, and respond to security threats in real time.
- Perform continuous security monitoring within the Security Operations Center (SOC) environment, handling a high volume of alerts from endpoints, networks, and cloud infrastructures.
- Analyze security logs, alerts, and telemetry data to detect suspicious activity, malware, and potential breaches.
- Investigate, triage, and respond to security incidents, following established incident response procedures and escalation paths.
- Conduct threat analysis and root cause investigations to determine impact, scope, and remediation actions.
- Collaborate with SOC team members and other IT/security teams to contain, remediate, and prevent recurring incidents.
- Maintain accurate incident documentation and ensure proper case management within ticketing systems.
- Produce daily and weekly security reports, summarizing alerts, incidents, trends, and response actions for management and stakeholders.
- Continuously tune and optimize detection rules, alerts, and workflows to reduce false positives and improve detection efficiency.
- Stay informed on emerging threats, attack techniques, and industry best practices to enhance overall security posture.
Requirements
- Proficiency in EDR/XDR platforms for continuous endpoint surveillance, behavioral analysis, and event correlation via SIEM tools.
- Expertise in threat hunting, alert triage, false positive qualification, and initial remediation like endpoint isolation or domain blocking.
- Knowledge of network protocols, logs (Syslog, Windows Events), scripting (PowerShell), and Cyber Threat Intelligence (CTI) for threat contextualization
- Bachelor's or Master's degree (Bac+3 equivalent) in cybersecurity, IT, or related fields, plus certifications, vendor-specific ESET, Trellix, Barracuda, SentinelOne, Fortigate.
- 2-5 years in SOC Tier 1/2 roles, with hands-on experience triaging alerts on EDR/XDR consoles to minimize noise.
- Ongoing training in advanced threats (EDR, XDR, MDR) to progress to senior positions.
Originally posted on Himalayas