Job description

Mindera works with a variety of clients across the world to innovate and solve tough technical problems.
Our security team enables Mindera to meet security standards, such as UK Cyber Essentials Plus and ISO 27001, and keep all Minders safe from the bad guys’ hands.
We are looking for one mid-level Information Security Analyst to work across all our locations.
As a mid-level information security analyst, you will help the team monitor Mindera’s infrastructure, manage vulnerabilities, respond to incidents, and offer advice and support to Minders.
You will also have the opportunity to contribute to our procedures as well as research and integrate solutions to continually improve Mindera’s security posture.
Important note: this role primarily involves working within European time zones, requiring a significant overlap with team hours.
Permanent contract Unlimited PTO Flexible working hours Training & conferences, create your own training plan Work with large scale systems powering global businesses; Most of all You get to work with a bunch of great people, where the whole team owns the project together in a politics-free environment.
Our culture reflects our lean and self-organization attitude.
We encourage our colleagues to take risks, make decisions, work in a collaborative way and talk to everyone to enhance communication.
Freedom and Responsibility go hand in hand, and we value commitment, feedback, and empathy.
About Mindera At Mindera we use technology to build products we are proud of, with people we love.
Software Engineering Applications, including Web and Mobile, are at the core of what we do at Mindera.
We partner with our clients, to understand their products and deliver high-performance, resilient and scalable software systems that create an impact in their users and businesses across the world.
You get to work with a bunch of great people, where the whole team owns the project together.
Our culture reflects our lean and self management attitude.
We encourage our colleagues to take risks, make decisions, work in a collaborative way and talk to everyone to enhance communication.
We are proud of our work and we love to learn all and everything while navigating through an Agile, Lean and collaborative environment.
Check out our Blog and our Handbook!
Our offices are located: Porto, Portugal | Aveiro, Portugal | Coimbra, Portugal | Leicester, UK | San Diego, USA | San Francisco, USA | Chennai, India | Bengaluru, India | Cluj-Napoca, Romania | Blumenau, Brazil | Casablanca, Morocco | Australia What you'll be up to Security monitoring and alerting: Develop, maintain, and fine-tune detection rules for our XDR platform.
Investigate security events to determine whether an incident occurred; Vulnerability management: Run and analyse vulnerability scans, identify weaknesses, report results and co-ordinate remediation; Security enablement: Advise and answer queries from Minders, contribute to security guidelines, awareness, and best practices.
Work with development teams to integrate threat modeling into the software development lifecycle, identifying and mitigating potential security risks; Incident response: Provide assistance during containment and recovery, prepare reports and use the lessons learned to strengthen our defenses, applying frameworks like MITRE ATT&CK; Systems integration: Develop scripts and tools to automate repetitive tasks and leverage Infrastructure as Code (IaC) principles to build and manage integrations across our security tools; What we’re looking for Experience: You know what you’re doing and want to learn more.
You have at least 3 years of hands-on experience in two or more relevant areas; Technical Skills: XDR Threat Detection/Response: You know your way around XDR platforms like Palo Alto, CrowdStrike, etc.
You can confidently investigate security events.
You know how build and tune detection rules with a clear understanding of the specific risks they are meant to catch and the impacts that they have on the incident response process.
Vulnerability Management: You have hands-on experience with tools like Tenable, Qualys, etc.
You know how to create scans and reports, query the data, and audit the platform itself.
Knowledge of how to use the APIs for automation and vulnerability management processes is a plus; Scripting and Automation: You don't like doing repetitive tasks manually.
You can write practical scripts to solve problems using languages like Python, or Bash.
Change management: You know how to test, validate, roll out, and roll back changes safely and securely.
Operating Systems: You have solid Linux and macOS knowledge, as well as a practical understanding of how things work on Windows; Cloud and On-prem Infrastructure: You are familiar with networking concepts and the cloud (AWS, GCP) and have a strong interest in learning and applying Infrastructure as Code (IaC) principles; Security Frameworks: You have a basic understanding of the concepts presented by frameworks like MITRE ATT&CK, NIST, CIS and what it means to applying them in practice; Communication Skills: You’re a good communicator and are not afraid to ask.
English is the main language used at Mindera, so you will be using it a lot, both spoken and in writing; Interpersonal skills: You can deal with many people from different backgrounds and skillsets and support them effectively; Growth Mindset: You can work autonomously and proactively in a distributed and dynamic organization.
You want to get things done, and done well.