Cybersecurity Specialist

Join our Cyber Defense Center as a Security Operations Specialist and become part of a global team dedicated to safeguarding our organization's people, systems, and data. As a member of our Security Operations Center (SOC), you will investigate security alerts, respond to cyber threats, and collaborate with colleagues across IT and cybersecurity functions to strengthen our security posture. Using advanced security technologies and threat intelligence, you will perform incident investigations, support threat hunting activities, and contribute to the detection, analysis, and mitigation of security risks across our global environment.

Responsibilities

• Investigate, validate, and respond to security incidents escalated by CrowdStrike Falcon Complete or reported by users and other IT departments.
• Investigate security incidents using CrowdStrike Falcon, Microsoft Defender and other security tools.
• Analyze alerts and suspicious activity using endpoint telemetry, threat intelligence and SIEM logs.
• Perform root cause analysis of security incidents and document findings and recommendations.
• Execute containment and remediation actions according to established procedures.
• Conduct threat analysis and participate in threat hunting and proactive investigations.
• Escalate complex incidents to senior analysts or specialized response teams when required.
• Document incidents, actions taken and lessons learned for compliance and operational purposes.
• Collaborate with the Global SOC team and other IT departments to enhance the organization's security posture.
• Contribute to the development, testing, and continuous improvement of incident response playbooks and procedures.
• Stay up to date with emerging cybersecurity threats, attack techniques and security technologies.
• Identify opportunities to improve detection capabilities and incident response processes.
• Support post-incident reviews and contribute to recommendations for preventing future incidents.

• Bachelor's degree in Computer Science, Information Security, Cybersecurity, or a related field.
• 1-3 years of experience in a Security Operations Center (SOC), Incident Response, IT Security, or a related cybersecurity role. Equivalent practical experience will also be considered.
• Hands-on experience investigating security alerts and incidents in an enterprise environment.
• Working knowledge of security monitoring concepts, alert triage, and incident investigation methodologies.
• Familiarity with attack frameworks such as MITRE ATT&CK and the Cyber Kill Chain.
• Basic understanding of security frameworks and standards such as NIST, ISO 27001, and CIS Controls.
• Knowledge of Windows operating systems, Active Directory, and networking fundamentals.
• Experience using security monitoring tools such as CrowdStrike, Microsoft Defender, SIEM platforms, or similar technologies.
• CrowdStrike certifications such as CCFA, CCFR, or CCFH are considered an advantage.
• Ability to analyze logs, endpoint telemetry, and security events to determine impact and scope of incidents.
• Strong analytical and problem-solving skills.
• Strong communication and collaboration skills.
• Ability to work independently and as part of an international team.
• Passion for cybersecurity and a willingness to continuously learn and develop new skills.
• Fluent in English.

Ready to drive with Continental? Take the first step and fill in the online application.