Security Analyst (fully remote) - 24/7

We are looking for a Security Analyst with experience in Security Operations Centre (SOC) environments, SIEM technologies, and proactive threat hunting. The ideal candidate has strong analytical and scripting skills, a hands-on approach to security, and an interest in developing advanced threat detection capabilities.

Responsibilities

• Threat Hunting: Proactively identify and investigate cyber threats across diverse customer environments using an advanced, machine learning-driven SIEM platform. Analyse suspicious activity, including living-off-the-land attacks and unusual system behaviour.
• Detection Engineering: Develop, maintain, and improve detection processes, installation scripts, and automation workflows to strengthen security monitoring and response capabilities.
• Log Analysis & Incident Investigation: Analyse Windows, Linux, and firewall logs to investigate suspicious activity, identify attack patterns, and reconstruct security incidents.
• Penetration Testing: Participate in Red Team exercises and penetration testing engagements to identify vulnerabilities and strengthen clients' security postures.
• Automation & Scripting: Develop scripts and automation solutions using Python and Bash to improve operational efficiency and streamline security processes.
• Product Development: Collaborate with the development team to provide feedback on machine learning models and contribute to enhancing the capabilities of the security platform.
• Stakeholder Communication: Communicate technical findings and security incidents clearly to both technical teams and senior stakeholders.

What’s on Offer?

• Flexible hybrid or remote working arrangements.
• Opportunities for professional development and career progression.
• Exposure to advanced cybersecurity technologies and hands-on technical challenges.
• A collaborative working environment that encourages innovation, autonomy, and continuous learning.
• A rotating 24/7 shift schedule, with an applicable shift allowance.

• Hands-on experience with SIEM solutions such as OpenSearch, Kibana, or equivalent platforms.
• Strong knowledge of log analysis across Windows, Linux, and firewall environments.
• Experience with threat hunting, security incident investigation, and identifying suspicious activity.
• Proficiency in Python and Bash scripting, with an interest in automation.

• At least 2 years of experience in a SOC environment or a similar cybersecurity role.
• Located in Malta

• Fully remote
• Shift allowance and flexible working hours