Mindera works with a variety of clients across the world to innovate and solve tough technical problems.
Our security team enables Mindera to meet security standards, such as UK Cyber Essentials Plus and ISO *****, and keep all Minders safe from the bad guys' hands.
We are looking for an Information Security Analyst to work across all our locations.
As a mid-level security analyst, you will monitor Mindera's infrastructure, manage vulnerabilities, respond to incidents, offer advice and support to Minders, and contribute to procedures and research to improve our security posture.
Important note: this role primarily involves working within European time zones, requiring a significant overlap with team hours.
Responsibilities Security monitoring and alerting: Develop, maintain and fine-tune detection rules for our XDR platform.
Investigate security events to determine whether an incident occurred.
Vulnerability management: Run and analyse vulnerability scans, identify weaknesses, report results and coordinate remediation.
Security enablement: Advise and answer queries from Minders, contribute to security guidelines, awareness and best practices.
Work with development teams to integrate threat modelling into the software development lifecycle, identifying and mitigating potential security risks.
Incident response: Provide assistance during containment and recovery, prepare reports and use lessons learned to strengthen our defenses, applying frameworks such as MITRE ATT-ACK.
Systems integration: Develop scripts and tools to automate repetitive tasks, leverage Infrastructure as Code (IaC) principles to build and manage integrations across our security tools.
Qualifications Experience: At least 3 years of hands-on experience in two or more relevant areas.
Technical skills: XDR Threat Detection/Response: Knowledge of XDR platforms such as Palo Alto, CrowdStrike, etc.
; ability to investigate security events, build and tune detection rules.
Vulnerability Management: Experience with tools such as Tenable, Qualys, ability to create scans and reports, query data, audit platform and use APIs for automation.
Scripting and Automation: Write practical scripts using Python, Bash, or similar languages.
Change management: Test, validate, rollout and rollback changes safely.
Operating Systems: Solid knowledge of Linux, macOS and practical understanding of Windows.
Cloud and On-prem Infrastructure: Familiarity with networking concepts, cloud (AWS, GCP) and interest in IaC principles.
Security Frameworks: Basic understanding of frameworks such as MITRE ATT-CK, NIST, CIS and application in practice.
Communication skills: Good communicator, proficient in English, both spoken and written.
Interpersonal skills: Able to collaborate with diverse stakeholders and support them effectively.
Growth mindset: Work autonomously and proactively in a distributed, dynamic organization; desire to get things done well.
Benefits Well-being First: Health insurance and open holidays.
Flexible working: Work from our hubs in Porto, Aveiro or Coimbra, or remotely within Portugal.
Career Growth: Dedicated budget for training and conferences, plus transparent profit sharing.
Tools for Success: Laptop and peripherals tailored to your needs, hotspot with unlimited usage.
Team events: Annual trip, sports, and sharing groups to connect and have fun.
Locations Our offices are located in Porto, Portugal; Aveiro, Portugal; Coimbra, Portugal; Leicester, UK; San Diego, USA; San Francisco, USA; Chennai, India; Bengaluru, India; Cluj-Napoca, Romania; Blumenau, Brazil.
#J-*****-Ljbffr