We are looking for a Security Analyst with experience in Security Operations Centre (SOC) environments, SIEM technologies, and proactive threat hunting. The ideal candidate has strong analytical and scripting skills, a hands-on approach to security, and an interest in developing advanced threat detection capabilities.
Responsibilities
- Threat Hunting: Proactively identify and investigate cyber threats across diverse customer environments using an advanced, machine learning-driven SIEM platform. Analyse suspicious activity, including living-off-the-land attacks and unusual system behaviour.
- Detection Engineering: Develop, maintain, and improve detection processes, installation scripts, and automation workflows to strengthen security monitoring and response capabilities.
- Log Analysis & Incident Investigation: Analyse Windows, Linux, and firewall logs to investigate suspicious activity, identify attack patterns, and reconstruct security incidents.
- Penetration Testing: Participate in Red Team exercises and penetration testing engagements to identify vulnerabilities and strengthen clients' security postures.
- Automation & Scripting: Develop scripts and automation solutions using Python and Bash to improve operational efficiency and streamline security processes.
- Product Development: Collaborate with the development team to provide feedback on machine learning models and contribute to enhancing the capabilities of the security platform.
- Stakeholder Communication: Communicate technical findings and security incidents clearly to both technical teams and senior stakeholders.
What’s on Offer?
- Flexible hybrid or remote working arrangements.
- Opportunities for professional development and career progression.
- Exposure to advanced cybersecurity technologies and hands-on technical challenges.
- A collaborative working environment that encourages innovation, autonomy, and continuous learning.
- A rotating 24/7 shift schedule, with an applicable shift allowance.
Requirements
- Hands-on experience with SIEM solutions such as OpenSearch, Kibana, or equivalent platforms.
- Strong knowledge of log analysis across Windows, Linux, and firewall environments.
- Experience with threat hunting, security incident investigation, and identifying suspicious activity.
- Proficiency in Python and Bash scripting, with an interest in automation.
Benefits
- Fully remote
- Shift allowance and flexible working hours
Education and experience
- At least 2 years of experience in a SOC environment or a similar cybersecurity role.
- Located in Malta
