Location : The company is Malta-based, however, you will be working remotely.
The Mission
At CyberSift, we don’t just monitor alerts; we build the filters that stop the noise. We are an AI-driven security firm sitting at the intersection of Machine Learning and Threat Intelligence. As a Security Analyst, you won't just be staring at a dashboard, you will be the "Human in the Loop" for our proprietary security tools, hunting for advanced threats and helping us automate the future of defense.
What You’ll Actually Do
- Proactive Threat Hunting : Use our customized ML-driven SIEM to hunt threats ranging from "living off the land" attacks to zero-day anomalies across a vast array of customer environments and complex digital infrastructures.
- Detection Engineering : Don’t just follow playbooks, write them! You’ll maintain and improve our install scripts and automation workflows to ensure our defense is always one step ahead.
- Offensive Pivot : We believe the best defenders know how to attack. You will participate in Red Teaming and Penetration Testing engagements for our tier-1 clients.
- Product Evolution : Work directly with our dev team to provide feedback on our ML models. If you see a way to make the product smarter, you’ll have the autonomy to build it.
Who You Are
The SIEM Specialist : You’ve spent 2+ years in a SOC environment and can navigate Elasticsearch / Kibana or any other SIEMThe Hunter : You can analyze Windows, Linux, and Firewall logs to reconstruct an attack narrative from raw data.The Scripter : You speak Python and Bash. If you have to do something twice, you’ve already automated it.Communicator : You can explain a complex exfiltration event to a C-level executive in clear English.Perks & Culture
Innovation in Action : We don’t believe in static defense. You’ll work at the front lines of our AI development, providing the "human-in-the-loop" feedback needed to suppress false positives and improve our proprietary sifting algorithms.The Pentesting Path : We provide a clear track for growth from SOC Operations into Offensive Security.Full Remote Autonomy : Work from anywhere while remaining part of a tight-knit core team.Shift Flexibility : This role operates on a rotating 24 / 7 schedule to ensure our global clients are always protected.