Security Analyst

Netrix Global

9d•Remote

About The Position

Netrix Global is seeking a Security Analyst to join its Managed Services – Security department. The role monitors, triages, and investigates security events across client environments, supporting timely incident identification, clear client communication, and effective escalation of confirmed or high-risk threats. The analyst applies technical analysis, threat intelligence, and documented response procedures to help protect client information assets. The role can be performed remotely from a home office, with some travel required. The position is based in Argentina and offers a day shift scheduled either Sunday through Thursday or Tuesday through Saturday.

Requirements

Strong analytical, problem-solving, communication, and technical documentation skills.
Ability to investigate security events, analyze findings, and communicate risks and recommendations to technical and non-technical audiences.
Experience monitoring, investigating, and responding to security incidents in a SOC or security operations environment.
Hands-on experience with Elastic SIEM or comparable SIEM platforms for monitoring, investigations, alerting, and log analysis.
Strong understanding of security operations, including incident triage, threat detection, alert management, and escalation procedures.
Knowledge of network security fundamentals, including TCP/IP, DNS, HTTP/S, SMTP, firewalls, IDS/IPS, VPNs, and common attack vectors.
Experience with log analysis and event correlation across endpoints, networks, cloud platforms, and security technologies.
Familiarity with threat intelligence concepts, IOCs, MITRE ATT&CK, and common adversary tactics, techniques, and procedures.
Understanding of Windows, Linux, and cloud environments, including common authentication mechanisms and security logging sources.
Experience with ticketing systems, case management platforms, and security documentation processes.
Advanced English.

Nice To Haves

At least 2 years of experience in cybersecurity, security operations, threat detection, incident response, or a related technical role is preferred.

Responsibilities

Monitor and analyze security events across network, endpoint, and cloud environments using Elastic SIEM to identify suspicious activity, threats, and policy violations.
Investigate and validate potential security incidents, including malware infections, phishing campaigns, unauthorized access attempts, and other malicious activity.
Triage, classify, and prioritize security alerts to determine impact, severity, and required response actions.
Support incident response by collecting and analyzing evidence, escalating critical threats, and assisting with containment and remediation.
Correlate logs and security events from firewalls, IDS/IPS, web servers, endpoints, and cloud platforms to identify indicators of compromise.
Develop, tune, and optimize detection rules, dashboards, and alerts within Elastic SIEM.
Use threat intelligence, including IOCs and adversary TTPs, to improve detection and security monitoring.
Document investigations, incident findings, response actions, and lessons learned.
Produce security metrics, reports, and operational summaries for stakeholders.
Collaborate with Security Operations, IT, and other cross-functional teams on threat detection and incident response.
Contribute to process improvements, operational procedures, and knowledge-sharing initiatives.
Stay current on emerging threats, attack techniques, vulnerabilities, and security best practices.