N1 Operator 24x7

AND FOR THIS, WE BELIEVE IT WOULD BE IDEAL IF YOU HAD...

Experience

Experience in a similar role or in a technical support environment.

IT training

Cybersecurity knowledge

Required education:

Higher-level vocational training in computer systems and network administration.

Higher Technician in Multiplatform Application Development

Training in IT or experience in some area of IT

To perform the role, the skills that would best fit the team and the project would be:

Good organization of tasks, teamwork.

Ability to evaluate situations quickly and make informed decisions.

Clear communication skills, both written and verbal, to explain technical problems to non-technical audiences.

Desirable training:

Technical engineering or higher degree in Computer Science

Master's in cybersecurity

Knowledge of scripting or automation (for example, Python, PowerShell).

Desired technical skills

Knowledge of cybersecurity concepts and practices.

Proficiency in Ticketing tools such as JIRA, Service Now, or similar

Knowledge of SIEMs and EDRs

Required: English

• Work-life balance measures and flexible working hours
• Ongoing training and certifications.
• Hybrid remote work model.
• Attractive social benefits package
• Excellent dynamic and multidisciplinary work environment
• Volunteering programs

In Telefónica Cybersecurity & Cloud Tech's security monitoring unit, we are responsible for detecting, analyzing, and responding to all potential risk situations by executing actions to mitigate or contain a cybersecurity incident.

Incident detection:

Review and analyze alerts generated by security systems, such as network intrusions, suspicious user behaviors, malware, among others, to determine their relevance and severity.

Respond to low-complexity security incidents, following established procedures, and escalate those incidents that require additional intervention.

Record activity related to service development through the ticketing tool.

Maintain updated documentation on security processes, incidents, and lessons learned to improve responses to future incidents.

Perform initial investigations into events, correlating data to identify root causes and scope

Incident response: Depending on the nature of each situation, these actions may be carried out both in a planned manner, as well as with an immediate and urgent character, guaranteeing security in all cases.

Some examples of actions to be carried out may include

● Communications: request to block malicious IP addresses in WAF.

● Endpoint: request for antivirus scan and containment of devices with EDR agent

● Mail: request to include addresses in the whitelist/blacklist, redirect emails to quarantine, and delete emails.

● Access: request to block users, reset credentials, and session token on devices.