Level 3 XSIAM Security Analyst

Level 3 XSIAM Security Analyst Profile

6 Month contract 

3 x roles – Based in Poland

Key Skills & Technical Expertise:

• Expert in XSIAM platform architecture, automation, and advanced incident response.
• Deep understanding of threat hunting, advanced analytics, and complex automation workflows.
• Skilled in integrating XSIAM with threat intelligence platforms, EDR, and other security solutions.
• Proficient in scripting and automation (Python, PowerShell, APIs).
• Experience with forensic analysis, malware analysis, and root cause investigation.

Experience & Qualifications:

• 5+ years of experience in security operations, incident response, or threat hunting.
• Proven track record with large-scale XSIAM deployments or similar SOAR platforms.
• Demonstrated success in managing high-severity incidents and leading response efforts.
• References from previous enterprise security projects.

Certifications & Qualifications:

• Palo Alto Networks Certified Cybersecurity Professional (PCNSE) or equivalent.
• Certified Incident Handler (GCIH), CISSP, or equivalent advanced cybersecurity certifications.
• Additional certifications in threat intelligence or automation are a plus.

Roles & Responsibilities:

• Lead complex incident investigations, root cause analysis, and threat hunting activities.
• Develop and refine automation workflows to improve SOC efficiency.
• Provide guidance and mentorship to Level 2 analysts.
• Coordinate with internal teams and external partners for incident containment and remediation.
• Review and improve incident response procedures and playbooks.
• Support transition activities and knowledge transfer to Richemont’s internal SOC team.

Soft Skills:

• Strong analytical and problem-solving skills.
• Excellent communication skills for reporting and stakeholder engagement.
• Leadership qualities with the ability to mentor junior analysts.
• Ability to operate effectively in a high-pressure, global environment.

Location & Flexibility:

• Preferably based in or willing to operate across EMEA, APAC, or AMER regions.
• Flexibility for remote work, with a focus on maintaining security and confidentiality.