https://www.linkedin.com/jobs/view/2589415703/?refId=de319b3c-b1e1-48ad-ac46-99a234a9079c

Security Analyst (Portugal)

Coalition, Inc.

Portugal, Europe

About The Role: The Coalition Security team is comprised of bright minds across many cybersecurity domains, with expertise in Red Teaming, Threat Intelligence, Cyber Risk Management and Defensive Security Controls. In the Security Engineering role, your mandate is to protect our customers from loss. As a part of this mandate, you might find yourself analyzing data breaches and claims events, conducting client security gap analysis, assisting with penetration testing / red-team assessments. You will work across our client base on topics ranging from security architecture and cloud security, to data protection and compliance. You will also have an opportunity to work with our product team to codify security best practices into our underwriting algorithms, rating models and risk management apps. Responsibilities: Review and analyze the security posture of insureds or potential insureds quickly and efficiently, , Evaluate customer security programs, technologies, controls, and business environments, recommend and develop enhancements , Triage security incidents and claims, understand the root cause, and develop detection tradecraft from threat intelligence , Build security automation tooling to rapidly integrate optimizations into our underwriting system , Assist with developing Information Security Plans and Policies, including those for Incident Response, customized to customer requirements and risk profile , Provide recommendations on solutions to help customers manage information security risk , Track emerging security practices and contribute to building internal processes, and our various products , Stay abreast of the current regulatory environment, industry trends and related implications. Skills And Qualifications: Minimum of 2-4 years of security analysis or penetration testing experience , Demonstrated expert understanding of the life cycle of network threats, attack vectors, and methods of exploitation with an understanding of intrusion set tactics, techniques, and procedures , Knowledge of TCP/IP Protocols, network analysis and network/security applications, including log and network traffic capture analysis , Experience with Nmap, Nessus, Nexpose, Qualys, Burp, Kali, Metasploit, Meterpreter or other offensive tools, Knowledge of industry standard frameworks – NIST, ISO, HIPAA, PCI , Self-motivated with an entrepreneurial spirit and comfortable working in a fast-paced, dynamic environment, Strong interpersonal communication skills (verbal & written) , Aptitude to learn technical concepts/terms and ability to manage multiple tasks/projects simultaneously , Bachelors Degree in Computer Science, Information Security, Engineering or equivalent work experience. Bonus Points: Securing cloud based platforms (Microsoft Azure, Amazon AWS, etc.) - experience with system hardening procedures for Windows, Linux and Unix is helpful. Knowledge or experience with EnCase, FTK, SIFT, Volatility, Splunk, Graylog, ELK/Logstash, WireShark, Zeek, or other open source forensic/log analysis/network analysis tool , Knowledge of programming and scripting for development of security tools and industry frameworks is helpful , SCADA / Control systems network experience a plus. 