Cyber Security Expert - Log Management Job at Vodafone (İstanbul)

Cyber Security Senior Expert

At Vodafone, we’re not just shaping the future of connectivity for our customers...

Location

Türkiye , İstanbul

Salary:

Not provided

Vodafone

Expiration Date

Until further notice

Requirements

University degree (BSc./MSc.) in Engineering discipline (Electrical-Electronics, Computer Science or similar)
Fluent in English both written and spoken
At least 4 years of work and proven experience in Log Management domain tools in terms of architecture & design, integration, implementation, maintenance, troubleshooting, stakeholder management, company wide project management
Knowledge on Arcsight and preferably Splunk
Telecommunications industry experience is an advantage
Certification for related domains is highly preferable
Critical thinking with strong attention to details and follow up
Having low level security understanding but ability to present it in a high level
Strong analytical deduction
Being creative, problem solving and result oriented

Job Responsibility

Follow technology to design and develop new security-based services taking care of cost and performance criteria
Search for new security equipment’s & systems for better performance of security services with new features
Design, setup and maintain log management, access management, database security etc. infrastructure & equipments
Take necessary actions to prevent possible problems in Security systems core equipment
Solve problems that might occur on these systems working in cooperation with vendors, outsource companies and other teams in Vodafone
Follow capacity of Security services equipments and take necessary actions to increase/decrease capacity when required
Maintain Log Management & SIEM solutions like particularly Arcsight & Splunk working in cooperation with security related teams in Vodafone
Plan and attend operations on the equipments for fixing issues and keeping updated with new features
Prepare/supports documentation of equipments and services according to company PCI-DSS, ISO 27001, ISO 27701, COBIT, KVKK, GDPR, SOX etc. policies
Attending internal and external audits and preparing evidence when required

What we offer

Vflexy: Flexible Benefits Program
Hybrid working kit
Ergonomic kit allowance
Digital meal voucher
Flexible transportation allowance
Employee assistance hotline & counselling
Comprehensive and flexible private health insurance
Discounted price deals for wide range of products & services

New

Cyber Security Level 3 Analyst

We are seeking an experienced Cyber Security Level 3 Analyst to play a critical ...

Location

India , Pune

Salary:

Not provided

Vodafone

Expiration Date

Until further notice

Requirements

8+ years in SOC operations, SIEM monitoring, event analysis and incident management
Comfortable operating at Level 3 or senior Level 2 within large, complex organisations
Skilled in SIEM platforms such as ArcSight, Splunk, QRadar, LogRhythm or similar technologies
Knowledgeable in security event correlation logic, log analysis, and threat investigation techniques
Confident in networking and core security concepts across on‑premise and cloud environments
Experienced in creating playbooks, SOPs and process documentation
Proactive in learning about emerging cyber threats and defensive techniques
Certified with industry-recognised credentials such as CISSP or CISM (SANS certification is advantageous)
Able to communicate clearly and effectively with technical and non-technical stakeholders
Known for integrity, self-motivation, cultural sensitivity and strong interpersonal skills

Job Responsibility

Lead Level 3 investigation, analysis and triage of complex security alerts and incidents across SIEM platforms
Act as the primary technical subject matter expert for security alert investigation within the CSOC
Drive automation initiatives, alert fine-tuning, and process stabilisation to reduce operational effort and risk
Participate in daily stand-ups and actively lead incident investigations
Collaborate closely with onshore teams to optimise alert volumes and improve detection accuracy
Create and maintain SOPs, KEDB entries, playbooks, process and procedure documentation
Build and sustain a strong knowledge base by authoring and reviewing KB articles
Produce daily and management-level reports on alert trends, investigations and operational challenges
Mentor and guide new team members, fostering a culture of learning and knowledge sharing
Conduct brown-bag sessions to enhance team capability and awareness

What we offer

Exposure to advanced cyber defence operations within a global telecom environment
Opportunities to influence detection strategy, automation and operational maturity
Collaboration with global CSOC and CSIRT teams across multiple markets
A platform to develop leadership, mentoring and technical specialisation skills
A supportive environment that values continuous learning and knowledge sharing

Fulltime

Senior Cyber Security Analyst – Incident Response & SOC

We don’t hang up the leash until the job is done. Senior Cyber Security Analyst ...

Location

Salary:

Not provided

Zeektek

Expiration Date

Until further notice

Requirements

Email security fundamentals (SPF, DKIM, DMARC)
Phishing and malware investigations
DFIR / forensic investigation skills
Deep incident response experience
Threat analysis across multiple log sources
Hands-on tooling knowledge (EDR, SIEM, malware analysis, endpoint/network forensics)
Strong troubleshooting and scenario-based thinking
Strong written and verbal communication skills
Working knowledge of Data Loss Prevention concepts/products, Data Encryption concepts, and endpoint management
Technical knowledge of common network protocols and design patterns including TCP/IP, HTTPS, FTP, SFTP, SSH, RDP, CIFS/SMB, NFS

Job Responsibility

Leading investigations and serving as a subject matter expert while correlating data across multiple log sources and systems
Continually improving cyber security procedures and documentation to enhance the security posture of the organization
Communicating with users, vendors, and other IT personnel on security-related issues, providing expert guidance and support
Staying up to date on evolving cyber threats, identifying their impact, and detecting them in our environment
Managing infrastructure security systems such as HIDS/NIDS, SIEM, NGAV, EDR, UBA, WAF, DLP, and vulnerability management tools to meet regulatory requirements
Collaborating with business groups to establish and maintain strong working relationships

What we offer

Weekly Direct Deposit
401K Matching
Competitive medical, dental and vision insurance
Consistent communication throughout your project
ZeekTek Referral Program

Cyber Security Engineer

A seasoned Cyber Security professional with a strong background in incident resp...

Location

United States , Raleigh

Salary:

70.00 - 107.00 USD / Hour

Connexion Systems & Engineering, Inc

Expiration Date

Until further notice

Requirements

Strong written and verbal communication skills, with the ability to establish and maintain strong working relationships with business groups
Working knowledge of Data Loss Prevention concepts/products, Data Encryption concepts, and endpoint management
Technical knowledge of common network protocols and design patterns including TCP/IP, HTTPS, FTP, SFTP, SSH, RDP, CIFS/SMB, NFS
Familiarity with various cloud environments (AWS, Azure, O365)
Understanding of MITRE ATT&CK and NIST Cyber Security Frameworks standards and requirements and ability to apply them to an enterprise environment
In-depth understanding of Windows operating systems and general knowledge of Unix, Linux, and Mac operating systems
Functional and practical experience with at least one development or scripting language/framework (e.g., PowerShell, Python, .Net) and regular expressions
Bachelor's Degree in Information Security, Computer Science, or equivalent combination of education, training, and experience
Hold or willingness to obtain certifications such as GCIH, GCFE, GCFA, GCSA, GMON, CISSP, or other relevant security certifications
Fluent in writing, reading, and speaking English

Job Responsibility

Leading investigations and serving as a subject matter expert while correlating data across multiple log sources and systems
Continually improving cyber security procedures and documentation to enhance the security posture of the organization
Communicating with users, vendors, and other IT personnel on security-related issues, providing expert guidance and support
Staying up to date on evolving cyber threats, identifying their impact, and detecting them in our environment
Managing infrastructure security systems such as HIDS/NIDS, SIEM, NGAV, EDR, UBA, WAF, DLP, and vulnerability management tools to meet regulatory requirements
Collaborating with business groups to establish and maintain strong working relationships

Fulltime

Lead Cyber Security Analyst

e2e-assure is recruiting a Lead Cyber Security Analyst to work in our lively Oxf...

Location

United Kingdom , Oxfordshire

Salary:

Not provided

e2e-assure

Expiration Date

Until further notice

Requirements

Prior experience working in a cyber security-focused role, ideally SOC or Incident Response experience
Significant experience with log monitoring tools and SIEM platforms such as Splunk or Microsoft Sentinel
Experience with leading major incident investigations
Ability to train, coach, and mentor technical teams to help them achieve their potential
Advanced knowledge of cybersecurity and insight into recent and trends
Familiar with host and network based forensics and concepts
Experience of vulnerability management process
Experience with Log analysis / Log forensics (including PCAP analysis)
Endpoint artifact analysis (investigation packages etc)
Relevant computing or cyber university degree or Security certifications such as CompTIA Advanced Security Practitioner (CASP+), GIAC Certified Forensic Analyst, GIAC Cyber Threat Intelligence (GCTI), GIAC Open Source Intelligence (GOSI), GIAC Defending Advanced Threats (GDAT), GIAC Security Expert (GSE)

Job Responsibility

Improving the quality of detections and response/analysis routines and playbooks
Improving the quality of our threat intelligence platform, threat indicators and assist in optimisation of threat data
Supporting the SOC with wider cyber security expertise – advising, mentoring and coaching. Focusing on improving SOC efficiency by working across the business to bring down alert volume and collaborate on improvements, train SOC staff on investigations and rule tuning
Supporting the SOC team to achieve agreed SLAs and deliver high quality alerts, tickets, and incidents
Collating incident statistics and driving quality improvements
Lead and train the SOC on threat hunting, using this to drive improvements to detection capability
Lead the SOC to produce threat briefs for significant cyber events where customers need to take action
Proactively share knowledge within the team and the wider company, through training and mentoring sessions
Escalation point for the SOC for technical analysis
Incident Management Lead for the SOC

What we offer

Contributory pension scheme
25 days annual leave + Bank holidays (with additional for continued service)
private health insurance
enhanced maternity/ paternity/ sick pay
Cycle to Work scheme
Home and Tech purchase scheme
Employee assistance program

Fulltime

Cyber Security Engineer

This role is responsible for protecting the customer’s information systems and n...

Location

United States , Bethesda

Salary:

Not provided

Hoplite Solutions

Expiration Date

Until further notice

Requirements

Expert with at least one of the following tools: Splunk, HBSS/McAfee, Rapid7
Expert with implementing and managing SIEM (e.g., Splunk), end-point security (IDS/IPS and HBSS)
Expert knowledge of networking protocols, such as TCP/IP, LAN/WAN concepts
Expert with automation (e.g., Ansible, CloudFormation)
Strong attention to detail with analytical mind outstanding problem-solving skills
Awareness of Cybersecurity trends and hacking techniques
Active TS/SCI with polygraph
Candidate must have a BS degree and 8 years of prior relevant experience to operate within the scope contemplated by the level. Will consider work experience in lieu of a degree.

Job Responsibility

Plan, implement, manage, monitor, and upgrade security measures and tools for the protections of information systems and networks and automate repeatable tasks in a consultative role
Design, configure, implement, troubleshoot, and maintain all security platforms and their associated software, such as firewalls (Security Groups), intrusion detection/intrusion prevention, anti-virus/malware (HBSS), cryptography systems (Vormetric), SIEM (Splunk), and MDM
Formulate systems and methodologies as well as respond to security related events and assist in remediation efforts of cyber security incidents (system and/or network breaches, malware attacks)
Participate in the change management process
Coordinate, and monitor log analysis for our managed services offerings, to ensure customer policy and security requirements are met

What we offer

Full coverage for health, dental, and vision insurance for both individuals and families
100% coverage for life insurance, long-term and short-term disability
Match up to 7% of employees' contributions to their 401(k) funds
Follow the federal holiday calendar for paid holidays
4 weeks of paid time off
$5,000 yearly for education assistance or technical training

Fulltime

Sr. Cyber Security Engineer

Under the general direction of the Network and System Manager and with coordinat...

Location

United States , Los Angeles

Salary:

70.00 - 80.00 USD / Hour

Software Resources

Expiration Date

Until further notice

Requirements

Bachelor’s degree (B.A., B.S.) in computer science, information technology, cyber security or closely related field from an accredited institution
Network Certifications: CCNA (or similar)
Security Certifications: Security +, CISSP, OSCP (or similar)
5 years or more experience within Information Technology
At least 2 years specifically managing Information Security within an enterprise
Experience working with various NIST compliance standards
Must be detail oriented
able to detect cyberattacks and watch for minor changes in performance
Ability to respond to security alerts and uncover and fix flaws in computer systems and networks
Able to effectively communicate information security needs and potential threats to technical and nontechnical audiences

Job Responsibility

Design and build enterprise-class security systems for both production and corporate environments
Use and maintain software, such as firewalls and data encryption programs, to protect sensitive information
Check for vulnerabilities in computer and network systems
Recommend security enhancements to management or senior IT staff
Proactively seek security gaps with respect to current and projected business direction and spearhead solutions to address those gaps
Design and contribute heavily to network architecture including firewalls, WAFs, network segmentation, VLANs, VPNs, and DoS/DDoS mitigation
Create solutions that enhance cloud security using available cloud controls/products, third party products, and/or custom-developed systems
Understand corporate authentication and authorization systems including AD, LDAP, ADFS, Azure MFA and how to design secure corporate systems with them
Understand corporate enterprise tools such as Microsoft Office 365 (A5)
Develop security standards and best practices for the university

What we offer

medical, dental, and vision coverage
a 401(k) with company match
short-term disability
life insurance with AD&D

SOC Cyber Threat Expert

At Vodafone, we’re not just shaping the future of connectivity for our customers...

Location

Türkiye , Ankara

Salary:

Not provided

Vodafone

Expiration Date

Until further notice

Requirements

Bachelor’s Degree in engineering departments (preferably Electronics or Computer Engineering)
5+ years of experience in performing hands-on security engineering, consulting, team management, penetration testing, and/or adversary simulation, red teaming exercises, vulnerability assessments in complex operational ICT environments
Familiarity with industry standards like OWASP TOP10, CVSS, CIS, NIST etc.
CISSP, CISM, OSCP, CEH level is expected
Experienced in SIEM products (QRadar, FortiSIEM Splunk, Logsign etc.) and SOAR products
Experience working with Threat modeling (e.g., STRIDE, PASTA, FAIR, Security Cards), operational threat intelligence, and attack framework standards (e.g., MITRE ATT&CK) with a good understanding of the Cyber Kill Chain and pervasive threat attack methods and remediation
Experience working in an industry standard Security Operations Center or similar environment providing incident handling and response, intrusion detection, analysis, cyber threat intelligence, threat determination, and mitigations processing and tracking, working with several network and system security technologies to include Elasticsearch, data analytics platforms, endpoint tools, network technologies, and SIEMs
Experience developing detection logic for enterprise SIEM systems and with exploitation techniques and use case development
Experience in the detection and response to malicious activity using log data and alerts from cybersecurity solutions, systems, and network devices
Experience extracting and analyzing forensic artifacts across Windows, Mac, and Linux operating systems

Job Responsibility

Coding Experience in Scripting & programming languages (such as Java, Bash, Python, PowerShell, etc.) to use these skills to aid in responding to incidents involving Windows, Linux, and Mac hosts, as well as automate common analytical processes to reduce analyst time and avoid repetitive incident response tasks
Making assessments on Information Security processes and taking responsibility of implementing improvements on related systems
Deploy, configure, and maintain security technologies, including, EDR, XDR, SOAR, SIEM, solutions to assess each of the cybersecurity technology’s responses
Develop open-source and vendor based threat detection scenarios
Develop tooling for Detection Development Life-Cycle
Research on new threat hunting methodologies, tools, and technologies
Onboard and maintain detection and hunting products (SIEM, EDR, etc.)
Manage and maintain internal SOC technologies and processes
Effectively use threat intelligence services and malware sandboxes for hunting new malware threats
Excellent written skills with demonstrated ability to write reports

What we offer

Vflexy: Flexible Benefits Program
Hybrid working kit
Ergonomic kit allowance
Digital meal voucher
Flexible transportation allowance
Employee assistance hotline & counselling
Comprehensive and flexible private health insurance
Discounted price deals for wide range of products & services

Fulltime

Select Country

Cyber Security Expert - Log Management

Job Description

Job Responsibility

Requirements

Nice to have

What we offer

Looking for more opportunities?