CSIRT Analyst

Description

Job Summary: The CSIRT Analyst will be responsible for security incident detection, analysis, and response, ensuring the availability, integrity, and confidentiality of information. Key Highlights: 1. Responsible for security incident detection, analysis, and response. 2. Monitoring of security alerts and basic forensic analysis. 3. Collaboration with infrastructure and network teams in threat mitigation. Join Stefanini! At Stefanini, we are more than 30\.000 brilliant minds, connected from 41 countries, doing what they love and co\-creating a better future. You definitely don’t want to miss this! **CSIRT Analyst!** **** Why will we choose you? Because the challenges you’ll take on reflect your ambitions! **Responsibilities and Authorities** **OBJECTIVE** ------------ The CSIRT Analyst will be responsible for security incident detection, analysis, and response within the client’s technological environments. They will participate in technical investigation of alerts, incident management, and continuous improvement of cyber defense processes, ensuring the availability, integrity, and confidentiality of information. **Responsibilities and Assignments** ------------------------------------ * Monitor and analyze security alerts from various sources (SIEM, EDR, IDS/IPS, firewalls, etc.). * Conduct security incident analysis, root cause identification, and technical documentation of findings. * Execute containment, eradication, and recovery actions for incidents. * Collaborate with infrastructure and network teams to validate and mitigate threats. * Contribute to strengthening CSIRT operational procedures and *playbooks*. * Maintain effective communication with internal teams and the client during incident management. * Participate in simulation exercises (*tabletop*) and review of response plans. **Requirements and Qualifications** VALUABLE KNOWLEDGE * Experience in CSIRT/SOC, incident response, and basic forensic analysis. * Proficiency with SIEM tools (e.g., Splunk, QRadar, Sentinel, Elastic). * Knowledge of Threat Intelligence and frameworks such as MITRE ATT\&CK. * Experience with EPP/EDR/XDR (CrowdStrike, SentinelOne, Defender, Trend, etc.). * Skills in log, network, and endpoint analysis. * Scripting knowledge (Python, PowerShell, or Bash) for analysis automation. * Understanding of attack techniques and evasion methods. * Intermediate level of technical and conversational English (communication with global teams). COMPETENCIES * Analytical thinking and problem-solving orientation. * Ability to work under pressure and prioritize critical incidents. * Clear and technical communication in both Spanish and English (intermediate or higher level preferred). * Collaborative work ethic and results orientation. EDUCATION * Degree in Engineering, Technology, or related fields (Computer Science, Systems, Networks, Cybersecurity). * Desired certifications: CompTIA Security\+, Cisco CCNA, Microsoft SC\-900, or equivalents. Are you looking for a place where your ideas shine? With over 38 years of experience and a global presence, Stefanini transforms tomorrow—together. Here, every action matters, and every idea can make a difference. Join a team that values innovation, respect, and commitment. If you are a disruptive individual, committed to continuous learning, and innovation is in your DNA, then we’re exactly what you’re looking for. Come and let’s build a better future—together!