Senior Security Analyst

We are DXC – a Fortune 500 global IT services leader.

In Bulgaria, we are among the largest IT employers, delivering the full spectrum of the company’s diverse technical portfolio. Our teams work across cutting-edge technologies, contributing to projects that span industries and geographies.

We foster continuous learning and professional growth, offering access to targeted training and certifications aligned with individual interests and career aspirations.

Our culture of collaboration, innovation, and shared values empowers professionals to grow and succeed.

About the role

The Senior Security Analyst is an integral part of the Security Incident Response Process within the Intelligent Security Operations Center team. The primary function of the role will be to provide a technical escalation point during Security Incidents, establishing the extent of the threat, the business impacts and advising the most suitable course of action to contain and remedy the incident. Outside of the Incident Process the Senior Security Analyst is expected to maintain a good knowledge of the Current Threat Landscape, help enhance current techniques and identify new methods of detecting threats on our customers' networks. They must also demonstrate the ability to communicate effectively with the other key stakeholders in the incident process.

• Perform detail analysis of events during the incident process, combining sound analytical skills with advanced knowledge of IT Security and Network Threats.

• Perform daily follow up on all tickets that were not resolved by Security analysts

• Provide out-of-office hours, on-call support and guidance to the junior team members.

• Full understanding of the Cyber Kill Chain methodology

• Escalation to Security support teams as needed.

• Perform alert analysis and investigation activities according to SLAs and defined timelines

• Daily reviews all ongoing incidents.

• Degree/Diploma in Computer Science, Computer Engineering, Electrical Engineering, Management Information Systems or equivalent certifications (MCSE, MCP, HP-UX, CCNA, CCNP, SNIA, SANS).

• Minimum of 2-3 years’ hands-on technical knowledge of the applicable technology platform that you will be responsible for: SIEM, Network management, Security and HP Open View Products. Must be able to demonstrate troubleshooting and problem-solving skills.

• Fluent in written and verbal English.

• Experienced with Intrusion Detection System, Proxy Support, Security Client Support, Security Devices Administration, Security Server Compliance Monitoring & Reporting, Wireshark, SIEM and XDR tools such as MS Sentinel, ArcSight, Splunk, SumoLogic, MS Defenders, CrowdStrike, Carbon Black, Linux.

• Understanding of 24x7 mission critical enterprise computing environments and the impact of service disruption on a company’s bottom line.

• Good communication skills and customer centric focus - ability to communicate clearly and in a timely manner with all customers, partners and users, internal and external.