Job Opportunities API

Mindera works with a variety of clients across the world to innovate and solve tough technical problems. Our security team enables Mindera to meet security standards, such as UK Cyber Essentials Plus and ISO 27001, and keep all Minders safe from the bad guys’ hands. We are looking for a Mid Information Security Analyst that will help the team monitoring Mindera’s infrastructure, managing vulnerabilities, responding to incidents, offering advice and support to Minders. You will also have the opportunity to contribute our procedures as well as research and integrate solutions to continually improve Mindera’s security posture. Important note: this role primarily involves working within European time zones, requiring a significant overlap with team hours. We value  empathy, self-organization, and a positive attitude . If you are approachable, communicate clearly, and believe that team fit is just as important as technical prowess, you'll feel right at home here. At Mindera we encourage the use of AI to assist with coding and related tasks. We find a persons skill in engineering and software craft, has a big impact long term successful delivery, with or without AI. Our goal in the interview process is to understand the candidates knowledge and skill with engineering. If you need to, or plan to use AI, please be transparent with us when you're using it, to avoid issues and misunderstandings that can either: impact your chance of securing the role or impact your success at Mindera. National and international expected traveling time varies according to project/client and organizational needs: 0%-15% estimated. Requirements What you'll be up to Security monitoring and alerting : Develop, maintain and fine-tune detection rules for our XDR platform. Investigate security events to determine whether an incident occurred; Vulnerability management : Run and analyse vulnerability scans, identify weaknesses, report results and co-ordinate remediation; Security enablement : Advise and answer queries from Minders, contribute to security guidelines, awareness and best practices. Work with development teams to integrate threat modeling into the software development lifecycle, identifying and mitigating potential security risks; Incident response : Provide assistance during containment and recovery, prepare reports and use the lessons learned to strengthen our defenses, applying frameworks like MITRE ATT&ACK; Systems integration : Develop scripts and tools to automate repetitive tasks, leverage Infrastructure as Code (IaC) principles to build and manage integrations across our security tools; What are we looking for Experience : You know what you’re doing and want to learn more. You have at least 3 years of hands-on experience in two or more relevant areas; Technical Skills : XDR Threat Detection/Response : You know your way around XDR platforms like Palo Alto, CrowdStrike, etc. You can confidently investigate security events. You know how build and tune detection rules with a clear understanding of the specific risks they are meant to catch and the impacts that they have on the incident response process; Vulnerability Management : You have hands-on experience with tools like Tenable, Qualys etc. You know how to create scans and reports, query the data and audit the platform itself. Knowledge of how to use the APIs for automation and vulnerability management processes is a plus; Scripting and Automation : You don't like doing repetitive tasks manually. You can write practical scripts to solve problems using languages like Python, or Bash; Change management : You know how to test, validate, rollout and rollback changes safely and securely; Operating Systems : You have solid Linux and macOS knowledge, as well as a practical understanding of how things work on Windows; Cloud and On-prem Infrastructure : You are familiar with networking concepts, cloud (AWS, GCP) and have a strong intere