Senior Security Analyst

Job title: Senior Security Analyst

About the Role As a Senior Security Analyst focused on Incident Response (IR), Threat Intelligence (TI), and Threat Hunting, you will defend OutSystems’ digital assets and global operations. You will lead complex investigations, proactively detect threats, and drive improvements in security operations within a 24/7 global SOC.

What You'll Do

• Own complex incident investigations end-to-end, from detection to containment and remediation.
• Conduct root cause analysis and post-incident reviews.
• Continuously hunt for anomalies and threats across on-prem and cloud environments using threat intelligence, analytics, and behavioral patterns.
• Monitor global threat actor activity, transform raw intel into actionable defense strategies, and collaborate with internal teams to harden security posture of OutSystems.
• Work with engineering and DevSecOps teams to improve detection coverage, enrich SIEM use cases, and automate response processes.
• Develop, optimize, and maintain incident response and threat hunting playbooks, ensuring operational excellence and consistency.
• Identify gaps, suggest improvements, and contribute to capability building for detection, response, and threat modeling.

What We're Looking For

• 4–6+ years of experience in a SOC, MDR, or enterprise security team with hands-on IR, TI, or Threat Hunting focus.
• In-depth knowledge of the MITRE ATT&CK Framework, Cyber Kill Chain, and adversary TTPs.
• Strong understanding of SIEM tools (e.g., Splunk, Sentinel, QRadar), EDR, and other detection technologies.
• Proficiency with scripting or query languages (e.g., Python, PowerShell, KQL, YARA).
• Familiarity with AWS, Azure, and/or other cloud environments.
• Familiarity with web technologies and protocols (web applications, APIs, service-oriented architectures) and the threats against them.
• Experience with log analysis, forensic tools, and threat intelligence platforms (e.g., MISP, ThreatConnect).
• Ability to translate technical findings into clear, actionable insights for technical and non-technical audiences.
• Strong written and verbal communication skills, with experience presenting to stakeholders or executive teams.

Nice to Have

• Relevant certifications (e.g., GCIA, GCIH, GNFA, GCFA, GCTI, OSCP) or a degree in a cybersecurity-related field.
• Experience with detection-as-code, version control, and CI/CD for security content.