Cyber Security Analyst

Responsibilities

• ● Monitor security alerts and events using SIEM, EDR/XDR, IDS/IPS, firewalls , and other security tools.
• ● Investigate and triage security incidents and determine their severity and impact.
• ● Perform incident response activities, including containment, eradication, and recovery.
• ● Analyze security logs, network traffic, endpoint activity, and other indicators of compromise.
• ● Identify and investigate suspicious activities, malware, phishing attempts, unauthorized access, and other threats.
• ● Conduct threat hunting and proactively identify potential security risks.
• ● Perform vulnerability assessments and coordinate remediation of identified vulnerabilities.
• ● Monitor endpoint, network, cloud, and application security controls.
• ● Support security investigations through log analysis, forensic evidence collection, and root-cause analysis.
• ● Develop and maintain security rules, detection use cases, alerts, and monitoring procedures.
• ● Participate in security assessments, audits, penetration testing, and compliance activities.
• ● Assist with security awareness initiatives, including phishing simulations and user education.
• ● Maintain incident documentation, investigation reports, security metrics, and dashboards.
• ● Work closely with IT infrastructure, network, application, cloud, and compliance teams to resolve security issues.
• ● Stay updated on emerging cyber threats, vulnerabilities, attack techniques, and security best practices.
• ● Strong understanding of networking concepts : TCP/IP, DNS, HTTP/HTTPS, VPN, firewalls, proxies, and routing.
• ● Hands-on experience with SIEM platforms such as Microsoft Sentinel, Splunk, IBM QRadar, or similar.
• ● Knowledge of EDR/XDR solutions such as Microsoft Defender, CrowdStrike, or SentinelOne.
• ● Understanding of endpoint and server security across Windows and Linux environments.
• ● Knowledge of common cybersecurity threats, attack vectors, and vulnerabilities.
• ● Experience with security incident investigation and response.
• ● Familiarity with MITRE ATT&CK , IOC analysis, threat intelligence, and security frameworks.
• ● Basic understanding of vulnerability management and tools such as Nessus, Qualys, or Rapid7.
• ● Knowledge of email security, phishing, malware, and identity-related attacks.
• ● Familiarity with cloud security concepts across Microsoft Azure, AWS, or GCP is preferred.
• ● Basic scripting knowledge in PowerShell, Python, or Bash is an advantage.
• ● Strong analytical and problem-solving abilities.
• ● Excellent attention to detail.
• ● Ability to prioritize and respond effectively to security incidents.
• ● Strong written and verbal communication skills.
• ● Ability to work under pressure in a security operations environment.
• ● Good documentation and reporting skills.
• ● Ability to collaborate effectively with technical and non-technical stakeholders.