Security Operations Analyst

SAP Sales Cloud has immediate openings to work on our Security Operations team. This is an elite team of security analysts who do not merely monitor for attacks and malware, they actively and aggressively hunt for the evidence of compromise within our client's environments. You will be in on the ground floor of building a next-generation Security Operations Center (SOC).

CallidusCloud has recently become part of SAP whose vision is to help the world run better and improve people’s lives.

Responsibilities

Managed Detection and Response - 70%

Effectively perform managed detection and response for clients, entailing:

• Hunt client data sources such as:
  • SIEM
  • Endpoint Protection platforms
  • Vulnerability management and scanners
  • Windows and Linux server logs
  • Application server logs
  • Identity management platforms
• Make use of varied, disparate, constantly changing threat information
• Operate SIEM and other data analysis platforms
• Report on threat and vulnerability data using risk-evaluation methodologies

Security Operations – 30%

Effectively perform security operations duties such as:

• Provide tier-1 support of client security infrastructure including triage of problems from SIEM, endpoint antivirus, vulnerability management, and Windows and Linux systems
• Communicate client status to both technical and non-technical people
• Use a Service Desk ticketing system
• Collaborate with other tiers of support

Requirements:

• 2+ years in a hands-on IT role that can include either system or network administration
• Strong written communication skills
• Familiarity with network, system, and security administration, including:
  • Fundamental Windows and Linux administration
  • Intrusion Detection/Prevention systems
  • Vulnerability management platforms
  • Enterprise endpoint protection
  • DNS and fundamental TCP/IP protocols
• Use of SIEM including creating and modifying queries and alerts
• Familiarity with vulnerability scanning and reporting
• Familiarity with administration of cloud platforms such as AWS, Azure, or Google Cloud
• Successfully execute and triage Incident response procedures
• Understanding of threat intelligence models and data

We offer:

• Competitive compensation
• Budget for your personal development
• Private medical benefits
• Regular working hours for a good work-life balance
• Exciting projects in creative environment
• Very collegial, open-minded team
• Paid sport activities
• Cool working space

Deadline for applications: 25.05.2019.