SECURITY OPERATIONS ANALYST

Responsible for the day-to-day operation, administration,and hardening of the system’s security tools and controls. Complements the SOCby owning security tooling health, vulnerability and patch remediation,configuration compliance, and audit readiness, so that security controls stayeffective, current, and evidenced.

Key Responsibilities:

Security Tooling Administration

Administer and maintain security platforms such as TrendMicro (Vision One, Deep Security, Apex One), Tenable, Microsoft Sentinel, andDLP tools

Deploy and upgrade agents, manage policies, and monitor toolhealth, licensing, and coverage

Onboard new servers, applications, and log sources intosecurity tooling and SIEM

Tune policies, detection rules, and exclusions incoordination with the SOC and application teams

Vulnerability & Patch Operations

Schedule and review vulnerability scans, and validate andprioritise findings by CVSS, exploitability, and asset criticality

Raise remediation tickets, track them to closure, andescalate overdue items

Coordinate patch cycles with infrastructure and applicationteams, including emergency patching

Manage risk acceptance and exception requests withsupporting justification

Hardening & Configuration Compliance

Apply and verify security baselines (e.g. CIS benchmarks forRHEL, Windows, and cloud) across servers and cloud workloads

Assess the application impact of hardening controls withapplication teams before rollout

Monitor configuration drift and track remediation ofnon-compliant assets

Access & Identity Security

Support periodic access reviews, privileged account audits,and user access recertification

Review IAM roles and policies (e.g. AWS) againstleast-privilege principles

Monitor certificate expiry, key management, and secretshygiene

Incident Support

Support the SOC and incident response team withinvestigation data, tool queries, and containment actions

Contribute to post-incident reviews and implement resultingcontrol improvements

Governance, Reporting & Audit

Prepare regular reports on patch compliance, vulnerabilitytrends, hardening status, and tool coverage

Collect and maintain evidence for audits and compliancechecks (e.g. ISO 27001, government security standards)

Maintain security SOPs, runbooks, and the security riskregister

Track security-related change requests and participate inchange advisory discussions

Qualifications:

Diploma or Bachelor’s degree in Cybersecurity, IT, ComputerScience, or a related field (or equivalent experience)

3-5 years in security operations, security administration,or infrastructure security

Hands-on experience administering endpoint, XDR, orvulnerability management tools (Trend Micro and Tenable preferred)

Experience with patch management and configuration hardeningon Linux (RHEL preferred) and Windows

Working knowledge of AWS security services and sharedresponsibility model

Preferred certifications: CompTIA Security+, CISSP(associate or full), Microsoft SC-200, AWS Security Specialty

Nice to have: CISM, CISA, ISO 27001 Lead Implementer,Tenable certifications

Skills:

Strong understanding of security frameworks and standards(CIS, NIST, ISO 27001, MITRE ATT&CK)

Familiarity with SIEM, EDR/XDR, DLP, WAF, firewalls, andvulnerability scanners

Scripting and automation (Bash, PowerShell, Python, Ansible)for compliance checks and reporting

Working knowledge of ITSM tools (e.g. ServiceNow) and changemanagement processes

Strong analytical and documentation skills, with the abilityto explain risk to technical and non-technical stakeholders

Ability to drive remediation across multiple teams andvendors

Skills

Applications, Security Tools, Technology Risk Management, Remediation, Regulatory Compliance, Security Framework, DLP, Patch Management, IT knowledge, SoC, Cybersecurity, Agent Management System, Ansible, Drive Awareness, Security Platform, Validation Studies