Information Security Analyst We are looking for an Information Security Analyst for our security team at Mindera. As a mid-level information security analyst, you will help the team monitoring Mindera's infrastructure, managing vulnerabilities, responding to incidents, offering advice and support to Minders. You will also contribute to our procedures, research and integrate solutions to continually improve Mindera's security posture. This role primarily involves working within European time zones, requiring a significant overlap with team hours. What you'll be up to Security monitoring and alerting : Develop, maintain and fine-tune detection rules for our XDR platform. Investigate security events to determine whether an incident occurred. Vulnerability management : Run and analyse vulnerability scans, identify weaknesses, report results and coordinate remediation. Security enablement : Advise and answer queries from Minders, contribute to security guidelines, awareness and best practices. Work with development teams to integrate threat modeling into the software development lifecycle, identifying and mitigating potential security risks. Incident response : Provide assistance during containment and recovery, prepare reports and use the lessons learned to strengthen our defenses, applying frameworks such as MITRE ATT&CK. Systems integration : Develop scripts and tools to automate repetitive tasks, leverage Infrastructure as Code principles to build and manage integrations across our security tools. What we're looking for Experience : At least 3 years of hands-on experience in two or more relevant areas. Technical Skills XDR Threat Detection/Response : Comfortable investigating security events and building detection rules on XDR platforms such as Palo Alto or CrowdStrike. Vulnerability Management : Hands-on experience with tools like Tenable or Qualys, including scan creation, report generation and API automation. Scripting and Automation : Ability to write practical scripts in Python or Bash to solve problems. Change Management : Test, validate, rollout and rollback changes securely. Operating Systems : Solid knowledge of Linux and macOS, and a practical understanding of Windows. Cloud and On-prem Infrastructure : Familiarity with networking concepts, AWS and GCP, and interest in Infrastructure as Code. Security Frameworks : Basic understanding of MITRE ATT&CK, NIST, CIS and applying them in practice. Communication Skills : Effective communicator in English, both spoken and written. Interpersonal Skills : Able to work with people from diverse backgrounds and skill sets. Growth Mindset : Works autonomously, proactively and is motivated to get things done and done well. Benefits Well-being First : Health insurance and Open Holidays. Flexible Working : Work from our hubs in Porto, Aveiro or Coimbra, or remotely within Portugal. Career Growth : Dedicated budget for training and conferences, plus a profit-sharing model. Tools for Success : Choice of laptop, peripherals, hotspot with unlimited usage. Team Culture : Annual trips, sports and group activities. Location Jobio, Lisboa, Lisbon Metropolitan Area, Portugal #J-*****-Ljbffr