Security Analyst

Ebury helps ambitious businesses unlock global growth, and we take the same approach with our people. We encourage innovation and movement, collaboration and problem-solving, and foster an environment where everyone can feel they belong, are valued, supported and empowered to succeed. If you’re a collaborator who wants to help transform how businesses operate globally, get in touch - we’d love to discuss how Ebury can accelerate your career so you can shape the future. Security Operations Analyst Málaga Office - Hybrid: 4 days in the office, 1 day working from home As a Security Operations Analyst, you will work with senior team members to understand threats and risks, apply security measures, and leverage your advanced knowledge of security tools and cloud environments (AWS and GCP). This hands-on role involves analyzing new requirements to support Ebury's global expansion and meet regulatory changes. Key Responsibilities: 1. Security Incident Management and Response: Observing Security Events: This role involves consistently monitoring security event logs and alerts from multiple sources, including SIEM, endpoint protection system (EDR), intrusion detection and prevention systems (IDS/IPS), DLP alerts, and threat intelligence feeds. Event Triage and Prioritization: Evaluation of security events' severity, criticality, and potential impact for further escalation to Senior members in the team. Primary Incident Handling: Conduct an initial analysis to ascertain if a security event necessitates an incident response, gathering pertinent data and document findings to facilitate informed decision-making by Senior members in the team. Pursuit of Continuous Improvement: Proactive participation in refining SOC processes and playbooks, spotting opportunities for improvement, sharing insights, and incorporating lessons from past incidents, contributing to the evolution of the SOC's operational effectiveness. 2. Security Operations and Project Support: Assist with internal phishing campaigns and Ebury's Security Champions program Collaborate on security projects using Agile methodologies Analyse CVEs and conduct security assessments as part of vulnerability management Assist with employee security concerns and provide reporting 3. Team Collaboration and Support: Provide local and remote assistance to users on security matters Liaise and advise on security risk topics as required Collaborate with international team members and the IT department on new initiatives Qualifications and Skills: 1-3 years of experience as a security operations analyst Knowledge in the following areas: Security Incident Management and Response Log Monitoring / SIEM Cloud perimeter security (AWS and GCP) Desktop and physical network protection Digital forensics (e.g. email header analysis, log analysis and correlation, fundamental endpoint forensics and sysinternals) IDS / IPS Authentication management Vulnerability Management Proficiency in incident management (CSIRT) and forensic analysis Experience with security information and event management (SIEM) tools Familiarity with financial industry security standards (e.g., PCI DSS, ISO 27001) Good understanding of business and technical information security concepts based on ISO 27001 standard Knowledge of data protection principles and implementation Experience in the financial sector is a plus Relevant security certifications (e.g., GCIH, GCIA) are valued Personal Skills: Hands-on security practitioner Strong analytical and problem-solving skills Team player Excellent communication skills Fluency in English and Spanish Attention to detail and accuracy Highest level of ethical behaviour Why Ebury? Competitive Starting Salary with an annual discretionary bonus that truly rewards your performance from day one. Dedicated Mentorship: Learn directly from experienced managers who are invested in your success. Cutting-Edge Technology: Leverage state-of-the-art tailor made tools and systems that enable you to perform at y