Senior Security Analyst

Senior Security Analyst will work as a member of the CDC team. The successful candidate will possess deep technical knowledge on a number of security technologies; have a solid understanding of security investigations and Incident Response. Senior Analyst will assist with developing and documenting work processes and train other members of the team.

PRIMARY DUTIES AND RESPONSIBILITIES

• Assist in monitoring security alerts and events using security information and event management (SIEM) tools, intrusion detection systems, and other monitoring platforms.
• Identification of risk scenarios and translation into Use Cases / Active Threat Hunting.
• Triage of security events (end-to-end).
• Collaborate with cross-functional teams, including IT, to ensure security measures are integrated into the organization's technology infrastructure.
• Development of playbooks.
• Support the local security management and service owners in case of IT security incidents (incident response).
• Optimization of use cases and rules for the identification of potential attacks.
• Create rules for compliance and audit requirements and create and manage Watch Lists for current threats.
• Create custom rules/rule modifications and custom reports/ report modifications as needed.
• Create custom documentation for internal and external needs.
• Responsible for mentoring and training of other team members.
• Assist with designing and documenting work processes within the CDC.
• Perform other duties as assigned.

EDUCATION/EXPERIENCE/SKILL

• Bachelor's Degree or equivalent in Information Technology, Information Security/Assurance, Engineering or related field of study; at least 8+ years of related experience and/or training; or equivalent combination of education and experience required.
• Minimum 6-8 years Managed Security Services or Information Security experience required.
• Minimum 4 years of security investigation/Incident Response experience required.
• Proficiency in scripting languages e.g. Python , data query languages e.g. SQL , and familiarity with various security tools.
• Excellent written and verbal communication skills required.
• Solid understanding of Information and cyber Security, Networking concepts required.
• Strong Analytical thinking.
• Capability to put threat intelligence information into company context.
• Expert knowledge in attack strategies (e.g. MITRE Attack Framework)
• Exposure to various tools will be a plus - Defender , Sentinel , Splunk , Qualys etc.

Giesecke+Devrient (G+D) is a global SecurityTech company headquartered in Munich, Germany. G+D makes the lives of billions of people more secure. The company shapes trust in the digital age, with built-in security technology in three segments: Digital Security, Financial Platforms and Currency Technology.

G+D was founded in 1852 and today has a workforce of more than 14,000 employees. In the fiscal year 2023, the company generated a turnover of 3 billion euros. G+D is represented by 123 subsidiaries and joint ventures in 40 countries.