Cyber Security Analyst

Introduction:

The Cyber Security Analyst will be responsible for monitoring security events, analyzing suspicious activity, conducting vulnerability assessments, managing security tools and technologies, ensuring compliance with regulations, and providing security awareness training to employees.

Responsibilities:

1. Security Monitoring & Incident Response

• Monitor security events, logs, and alerts using SIEM tools (e.g., Splunk, Sentinel, QRadar).
• Analyze suspicious activity, investigate security incidents, and perform root-cause analysis.
• Respond to cyber threats including malware, phishing, intrusion attempts, and data breaches.
• Lead incident containment, eradication, recovery, and post-incident reporting.

2. Vulnerability Management

• Conduct regular vulnerability assessments and risk evaluations on networks, systems, and applications.
• Track and prioritize remediation with IT and development teams.
• Perform penetration testing or coordinate third-party testing.

3. Security Tools & Technology Management

• Maintain and optimize security technologies such as firewalls, IDS/IPS, EDR/XDR, DLP, and email security platforms.
• Configure and tune detection rules, dashboards, and alerts.
• Support deployment of new cybersecurity solutions.

4. Governance, Risk & Compliance

• Ensure compliance with relevant frameworks (ISO 27001, NIST, SOC 2, GDPR, PCI-DSS, etc.).
• Assist in audits, risk assessments, and policy development.
• Maintain security documentation, runbooks, and standard operating procedures.

5. Awareness & Training

• Develop and deliver security awareness programs for employees.
• Educate teams on secure practices, phishing prevention, and reporting procedures.

Requirements:

• Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, or related field (or equivalent experience).
• 2–5+ years of experience in cybersecurity or IT security roles.
• Strong knowledge of network security, operating systems, cloud platforms (AWS/Azure/Google Cloud Platform), and security frameworks.
• Experience with SIEM tools, endpoint security solutions, and incident response processes.
• Familiarity with scripting (Python, Bash, PowerShell) is a plus.