{"id":1754657,"url":"https://alion.io/job/sigma-software-group-senior-cyber-security-analyst","title":"Senior Cyber Security Analyst","company":{"id":6266,"name":"Sigma Software Group","domain":"sigma.software","url":"https://alion.io/company/sigma-software-group","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"services","is_intermediary":false,"listed_via":null,"ats_vendor":"SmartRecruiters","truth_index":null},"role":"Security","role_family":"Security","seniority":"senior","employment_type":"full_time","work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"board_field","remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Warsaw, Poland"],"countries":["PL"],"hiring_countries":["PL"],"hiring_countries_total":1,"salary":null,"salary_estimate":{"min_usd":55000,"max_usd":103000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":18},"experience_years_min":3,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Datadog","optional":false},{"name":"DNS","optional":false},{"name":"JavaScript","optional":false},{"name":"Kibana","optional":false},{"name":"OpenSearch","optional":false},{"name":"Snowflake","optional":false},{"name":"SQL","optional":false},{"name":"TCP/IP","optional":false},{"name":"GitHub","optional":true},{"name":"Jupyter Notebook","optional":true},{"name":"MITRE ATT&CK","optional":true},{"name":"Python","optional":true}],"status":"live","first_seen_at":"2026-10-02T10:07:32Z","employer_posted_date":"2026-10-02","last_verified_at":"2026-10-13T14:25:37Z","board_verified":true,"closed_at":null,"days_open":11,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":11},"description":"As a Senior Cyber Security Analyst, you will join a team focused on identifying, investigating, and mitigating malicious web activity across large-scale digital environments. The role combines threat analysis, traffic investigation, detection engineering, and collaboration with customers and internal engineering teams to improve protection mechanisms and threat visibility.\nYou will work with high-volume traffic datasets, analyze suspicious behavior patterns, and contribute to the continuous improvement of security detections related to bots, fraud attempts, and other web-based threats.\nCUSTOMER\nOur client delivers advanced cybersecurity solutions designed to protect organizations, users, and digital ecosystems from evolving online threats. The company specializes in bot defense and anti-malvertising technologies for the AdTech industry, supporting SSPs, DSPs, agencies, and publishers through scalable protection platforms, customizable reporting tools, and API integrations.\nPROJECT\nThe project focuses on real-time threat detection and bot mitigation for enterprise-scale clients. Cyber Security Analysts collaborate directly with customers, leveraging advanced analytics platforms to identify malicious traffic patterns and neutralize online threats. This dynamic environment requires both technical expertise and strong communication skills.\n Monitor and investigate potential security threats using tools such as Kibana/OpenSearch and Snowflake. \nAnalyze security logs and investigate suspicious or unusual activity, including spikes in traffic, unexpected changes in attack patterns, and new or disappearing attack signals. \nDetermine whether detected activity is malicious or benign and identify the appropriate response, including detection engineering to block malicious activity when needed. \nDevelop, tune, and deploy detection rules based on traffic behavior, HTTP request attributes, headers, device fingerprints, and other indicators to mitigate malicious activity. \nMonitor existing detections and known attack patterns to make sure they continue to work as expected and identify any unusual changes in volume, sources, IPs, domains, or other indicators. \nSupport customer onboarding by analyzing web application traffic flows and configuring baseline detection and protection rules. \nInvestigate customer-reported incidents and missed detections, analyze attack traffic, and implement mitigations to improve protection coverage. \nDocument newly discovered threats and attacks, including evidence, findings, and indicators. \nCommunicate findings to Engineering and other stakeholders and provide the necessary technical details to support remediation and improvements to detection and protection mechanisms. \nPartner directly with counterparts through a ticketing system and support portal to investigate issues, provide updates, and resolve security-related requests. \n 3-5 years of experience in Cybersecurity, Threat Research, or Threat Intelligence\nBachelor’s degree in Computer Science, Cybersecurity, Information Security, or a related field\nStrong understanding of web technologies and networking fundamentals, including HTTP/HTTPS, TCP/IP, DNS, authentication, cookies, and browser-server interactions\nExperience in web security research, bot management, fraud detection, or related domains\nHands-on experience with threat investigations, IOC analysis, and threat intelligence research\nExperience with log analysis and investigation platforms such as Kibana/OpenSearch, Snowflake, Datadog, or similar tools\nStrong SQL skills, including working with large datasets and UDFs\nBasic knowledge of JavaScript for web and client-side analysis\nStrong analytical and problem-solving skills\nAbility to work independently and manage investigations with minimal supervision\nStrong communication and collaboration skills\nPassion for cybersecurity and continuous learning\nNICE TO HAVE:\nKnowledge of MITRE ATT&CK, malware analysis, vulnerabilities, and adversary TTPs\nOSINT and cyber threat intelligence research experience\nPython and Jupyter Notebook experience for investigations and automation\nExperience with GitHub and version control workflows","description_format":"text","description_chars":4169,"description_truncated":false,"requirements":{"experience_years_min":3,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[{"language":"English","level":"All levels","optional":false}]},"benefits":["Continuous learning"],"hiring_locations":[{"name":"Poland","iso":"PL","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Cybersecurity","Information Security","IT Outsourcing & Dedicated Teams","Custom Software Development"],"lifecycle":[{"event":"open","at":"2026-10-03T10:15:06Z"}],"visa":[],"liveness":{"score":69,"band":"ok","label":"Likely open","p_open":1,"p_active":0.761,"p_room":0.9,"age_days":10,"expected_fill_days":29,"reasons":["conf:2","velocity","win:mid"],"computed_at":"2026-10-13T05:45:00Z"},"pay":null,"html_url":"https://alion.io/job/sigma-software-group-senior-cyber-security-analyst","json_url":"https://alion.io/job/sigma-software-group-senior-cyber-security-analyst.json","meta":{"generated_at":"2026-10-13T16:06:19Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":24484,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-14T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":6266},"rest":"https://alion.io/mcp/rest/get_company?id=6266"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fsigma-software-group-senior-cyber-security-analyst"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fsigma-software-group-senior-cyber-security-analyst"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fsigma-software-group-senior-cyber-security-analyst"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/sigma-software-group-senior-cyber-security-analyst\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fsigma-software-group-senior-cyber-security-analyst"}]}