Cybersecurity Analyst

Overview:

We are seeking a detail-oriented and proactive Security Analyst to join our cybersecurity team. The Security Analyst will be responsible for monitoring, detecting, investigating, and responding to security threats and vulnerabilities across the organization's IT environment. The ideal candidate will have hands-on experience in security operations, incident response, vulnerability management, and security monitoring tools.

Roles & responsibility:

• Monitor security alerts and events through SIEM, EDR, IDS/IPS, and other security tools.
• Investigate and respond to security incidents, including malware infections, phishing attacks, unauthorized access attempts, and data security events.
• Conduct threat hunting and identify indicators of compromise (IOCs).
• Perform vulnerability assessments and support remediation activities.
• Analyze security logs, network traffic, and system events to identify suspicious activity.
• Assist in developing and maintaining security policies, standards, and procedures.
• Support security audits, compliance assessments, and risk management initiatives.
• Collaborate with IT, Infrastructure, Cloud, and Application teams to enhance security controls.
• Track, document, and report security incidents and remediation efforts.
• Stay current with emerging cybersecurity threats, attack techniques, and industry best practices.
• Support awareness initiatives by educating employees on security risks and safe practices.

Qualifications

• Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related field.
• 3-6 years of experience in Information Security, Security Operations, or Cybersecurity.
• Experience with security monitoring and SIEM solutions such as Microsoft Sentinel, Splunk, QRadar, or LogRhythm.
• Knowledge of endpoint security solutions (Microsoft Defender, CrowdStrike, SentinelOne, etc.).
• Understanding of network security concepts, protocols, and technologies.
• Experience in vulnerability management tools such as Nessus, Qualys, or Rapid7.
• Familiarity with security frameworks and standards such as NIST, ISO 27001, CIS Controls, and MITRE ATT&CK.
• Knowledge of cloud security principles across Azure, AWS, or Google Cloud.
• Strong analytical, troubleshooting, and incident investigation skills.
• Excellent verbal and written communication skills.