Information Security Analyst

The Information Security Analyst is responsible for protecting the organization’s information systems, networks, and data from security threats. This role focuses on monitoring, analysis, incident response, risk management, and ensuring compliance with security policies, standards, and regulatory requirements.

Key Responsibilities

Security Monitoring & Incident Response

• Monitor security alerts and events using SIEM and security tools

• Investigate, respond to, and remediate security incidents

• Conduct root cause analysis and document incident reports

Threat & Vulnerability Management

• Perform vulnerability assessments and support penetration testing

• Track, prioritize, and remediate security vulnerabilities

• Stay current on emerging threats, attack vectors, and security trends

Risk Management & Compliance

• Support risk assessments and security control evaluations

• Assist with compliance requirements (ISO 27001, SOC 2, PCI-DSS, HIPAA, GDPR, etc.)

• Maintain security policies, procedures, and documentation

Security Operations & Controls

• Implement and maintain security controls across networks, endpoints, and cloud environments

• Support identity and access management (IAM) processes

• Assist with data protection, encryption, and secure configuration standards

Awareness & Collaboration

• Support security awareness and training programs

• Collaborate with IT, DevOps, and business teams to embed security best practices

• Participate in audits and third-party security reviews

Required Qualifications

Education

• Bachelor’s degree in Information Security, Computer Science, IT, or related field

Experience

• 2–5 years of experience in information security, cybersecurity, or IT operations

• Hands-on experience with security monitoring and incident response

Technical Skills

• SIEM tools (Splunk, Sentinel, QRadar)

• Vulnerability scanning tools (Nessus, Qualys, Rapid7)

• Endpoint and network security tools (EDR, firewalls, IDS/IPS)

• Cloud security fundamentals (AWS, Azure, or Google Cloud Platform)

• Operating systems: Windows, Linux

Soft Skills

• Strong analytical and investigative skills

• Attention to detail and risk-based thinking

• Clear communication and documentation abilities

Preferred Qualifications

• Security certifications (Security+, CEH, CISSP, CISM, GCIH)

• Experience with cloud security and DevSecOps

• Knowledge of scripting or automation (Python, PowerShell)

• Familiarity with SOAR platforms