Information Security Analyst

About Blackhawk Network: At Blackhawk Network, we shape the future of global branded payments through the prepaid products, technologies and network that connect brands and people. Our collaborative innovation and scalable, security-minded solutions help our partners to increase reach, loyalty and revenue. We believe our future holds great things for Blackhawk Network and its partners. We believe that together, we can shape the future. Our Beliefs? Be one Global Team, Be Innovative, Be Accountable and be Authentic! Overview: Blackhawk Network Cybersecurity, whose mission is to protect us against cyber threats, reinforces its position Globally by establishing a Cyber Defence Centre (CDC) shift in Europe.
The Cyber Defence Centre is a department that provides Cyber defence services in order to:

• Prevent a cyber risk (Consulting & audits)
• Detect and react on security incidents (Security Operation Centre – SOC)
• Respond to an attack (Computer Security Incident Response Team – CSIRT)

In this context, the Cyber Defence Centre is seeking to hire a SOC Level 2 analyst Responsibilities: Within the SOC of Blackhawk Network Cybersecurity and under the responsibility of the SOC manager, the SOC level 2 analyst works as part of a team in charge of security monitoring, threat and vulnerability watch.
The primary mission of the SOC analyst is to deal with the security events and alarms detected by the security tools, running initial analysis and processing or passing onto the level 2 SOC analysts.
The SOC level 2 analyst belongs to the analysis staff, works during regular business hours and in standby shifts.
Missions:

• Security monitoring

• Investigates initial events and then categorise these into alarms and if appropriate forward on to the 3rd Line Analysts
• Add context to the events to understand the behaviour, analysing data from multiple tools and data sources.
• Participates in the crisis management by providing support to the incident handler and the SOC Level 3 analysts.
• Create reports and visualizations of security attacks.
• Tracks trends for metrics and reporting
• Works on the decrease of false positives
• Maintain the detection rules database.

• 
  Customer relation

• Participates in recurrent meetings with the business area and wider security team as the technical referent.
• Provides recommendations or workarounds to the business to reduce the business impact.
• Leads and participates in the continuous improvement of the service (detection level, process, operational procedures, service efficiency, service reporting)
• Supports the business for the remediation of incidents.
• Supports the SOC manager for the reporting of the activity.

• 
  Continuous improvements

• In charge of the improvement plan and development of process/procedure manuals and documentation
• Participate in the improvement plan for service efficiency and detection rules.
• Works independently to perform analyses and investigations.

We provide training on the tools and processes for the success of your mission.
Due to the nature of SOC operations, there is the possibility that analysts will be required to work in alternate standby shifts, including weekends and nights.
This job requires an awareness of any potential compliance risks and a commitment to act with integrity as the foundation for the Company’s success, reputation and sustainable growth.
Qualifications: Profile With a proven experience in the field of Cyber defence, you know attack methods and security equipment functions. You possess an Information Security and operationally oriented mindset.
You are a professional with at least 2 to 5 years of experience in the field service and business relations.
You are comfortable with IDS - NDR - EDR – SIEM – Log Management, Vulnerability scanning technologies.
Education: Security diploma with Cyber security training or equivalence experience in the domain of Cyber defence.
Required Skills:

• Rigorous and respectful of the process. Strong attention to detail.
• Strong time management skills with the ability for multitasking
• Information Security and operationally oriented mindset
• Team Spirit
• Customer focus
• IDS – NDR - EDR - SIEM – Log Management, Vulnerability scanning technologies, Ticketing system
• Intrusion and Information system corruption techniques
• Knowledge of security policies for information systems
• Autonomous and self-organized
• Analysis and synthesis skills
• Drafting quality
• Communication and oral expression (English)

EEO Statement: Blackhawk Network provides equal employment opportunities to all employees and applicants for employment and prohibits discrimination and harassment of any type without regard to race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state or local laws. Blackhawk Network believes that diversity leads to strength. This policy applies to all terms and conditions of employment, including recruiting, hiring, placement, promotion, termination, layoff, recall, transfer, leaves of absence, compensation and training.