Cyber Security Analyst

About Us:

Beam.lu is a growing SaaS company committed to providing secure, scalable, and innovative cloud solutions. We are looking for a proactive and skilled Cyber Security Analyst to join our team in Lisbon. This role is critical in ensuring the protection of our systems and data across the entire organization. The ideal candidate will take ownership of security incident management, technical security controls, and the ongoing optimization of security processes.

Key Responsibilities:

1. Cyber Security Incident Management:

• Monitor and investigate security incidents using internal tools and reports from external sources (such as SOC).
• Manage incident follow-up actions, ensuring documentation is accurate and comprehensive.
• Develop, update, and maintain processes and procedures related to incident management.

2. Active Role in Technical Security:

• Implement and maintain appropriate cyber security controls, providing documentation to demonstrate their effectiveness.
• Stay up-to-date on cyber security trends, industry developments, and best practices.
• Propose new security solutions to enhance the protection of company assets.
• Report on key performance and risk indicators related to cyber security controls.
• Assist other technology teams in conducting security-related risk assessments.
• Support the implementation of ISO 9001 and ISO/IEC 27001 standards within quality and security management systems.

3. Perform Security Controls:

• Manage user access rights and perform regular reviews.
• Monitor and manage antivirus events and ensure timely updates.
• Ensure asset inventories are accurate and up to date.
• Test backup and restore processes to ensure efficiency.
• Conduct vulnerability management, guiding technical owners through the mitigation process (e.g., patching or risk acceptance).
• Monitor the effectiveness of network segmentation.
• Ensure server, endpoint, and application hardening is in place and effective.

4. Security 1st Level Support:

• Provide and optimize security support across the entire organization.
• Monitor security tickets and queues in the company’s ticketing system.
• Monitor and respond to the Information Security mailbox.
• Conduct initial investigations into infrastructure-related security events, requests, and incidents.

5. Documentation Improvement:

• Create and maintain security processes, procedures, and standards for the security team.
• Continuously improve documentation through regular reviews and updates.

Qualifications:

• Diploma or relevant experience in IT/Security domain.
• Strong understanding of vulnerability management, Microsoft Defender, Sentinel (including KQL), firewalls, networks, proxies, SIEM, antivirus, IDPS concepts, Microsoft Windows and Linux OS, databases, virtualization, and cloud technologies.
• Fluent in English (both written and verbal). French language skills are an advantage.
• Proactive, autonomous, motivated, and highly organized.
• Strong analytical skills with the ability to solve issues in a timely manner.
• Excellent verbal and written communication skills, with a diplomatic and tactful approach.
• Team-oriented with a positive attitude in a challenging environment.
• Eager to learn and improve skills continuously.