Cyber Security Analyst

About WFS

Join our Worldwide Flight Services family and contribute to the timely delivery of cargo shipment, luggage, business to customer delivery, and on-time flights while operating safely and securely.  We perform at the highest level for our customers every day, and strive to be an exceptional leader in our industry with our teams of cargo, passenger, ramp handling, and technical service experts in 164 airport locations, 18 countries, and on 5 continents.  Are you ready to take off on your next career with us?

Job Summary

Our Cyber Security Analyst is responsible for running and improving the Security Controls, Platforms, Tools and Processes making up the WFS Group IS Security Program. The Cyber Security Analyst works under the authority of the Group CISO. The CSA collaborates with the Business and the IT Teams worldwide to improve the WFS security environment over time. The CSA oversees the Managed Security Services Provider (MSSP) in charge of the 24x7 Global Threat Hunting & Incident Response Processes. As well as (MDR Service, Managed Detection & Response).

Responsibilities

• Maintains a deep operational knowledge of the WFS IT environments & security mechanisms.
• Fine-tunes the configuration of the Security Tools, Platforms & Processes.
• Translates WFS security needs into ISMS Policies & Controls to be implemented internally.
• Delegates basic security checks & daily / low-level remediations to the local IT’s.
• Trains & upskills the IT Teams worldwide to handle more complex security activities
• Acknowledges, Investigates & Documents major security alerts in partnership with our MSSP, and checks that the threats have been eradicated. Coordinates with the IT Teams worldwide when complementary steps are required during & after an alert.
• Proactively searches for threats around the organization and deploys counter measures where appropriate, remediates issues, or escalates for further troubleshooting.
• Provides operational requirements to the security projects.
• Identifies gaps & vulnerabilities in the ongoing security measures & processes and logs them in the improvement plan.
• Oversees, instructs and coordinates with the MSSP in charge of the 24x7 Global Threat Hunting & Incident Response Processes.
• Gathers feedback & knowledge from the Business, the IT Teams, the MSSP, the past incidents & pen-tests, … and logs them into the cybersecurity improvement plan.
• Ensures that critical security patches are applied in due time by WFS IT Teams worldwide.
• Manages the endpoint security solutions for servers and workstations, tuning alerts, excluding false positives, reporting, etc.
• Stays up to date with the latest threats & security trends & analyses Threat Intelligence Feeds to focus and prioritize the effort.
• Participates in the major security projects like the replacement of the Group’s Proxies or the implementation of cloud security.
• Gathers relevant KPI’s.
• Provides inputs to the CISO for Risk Management & IS Security Strategy.

Minimum Requirements

• Bachelor’s in computer science or advanced cyber security certification in related area.
• Minimum of 3 years working in a security analyst & administrator role.
• Experience managing cyber security incidents and endpoint security tools.
• English Fluency (Professional Level)

Preferred Skills

• Excellent time management & prioritization skills
• Capacity to monitor & coordinate projects
• Mastery of problem-solving
• Ability to work under pressure in case of serious incidents
• Ability to work remotely with a team and good collaboration skills.
• Knowledge of business process and threat modeling methods.
• Proficiency with next generation anti-virus and anti-malware systems and/or IDS (Intrusion Detection Systems) and IPS (Intrusion Prevention Systems)
• In-depth knowledge of architecture, engineering, and operations of at least one enterprise SIEM platform
• Hands-on experience analyzing high volumes of logs, network data (e.g. NetFlow, FPC), and other attack artifacts in support of incident investigations.
• Experience with vulnerability scanning solutions
• Knowledge/experience partnering with a MSSP
• Knowledge/experience in implementing an ISMS (Information Security Management System)
• Experience in solutions currently in our portfolio:
  • Carbon Black, CrowdStrike, TrendMicro
  • O365 Advanced Threat Protection & Vadesecure Anti-Phishing Platform
  • M365 Security and Azure security a plus
  • AWS Cloud Security Services

Physical Requirements/Working Conditions

• Remain in a