Cyber Security Analyst

What You’ll Do:

• Monitor, detect, and respond to security incidents across networks, systems, and applications.
• Perform vulnerability assessments and coordinate remediation activities.
• Conduct security risk analysis and recommend mitigation strategies.
• Investigate security breaches and perform root cause analysis.
• Manage and monitor security tools such as SIEM, firewalls, IDS/IPS, and endpoint protection systems.
• Conduct periodic security audits and compliance checks.
• Implement and enforce security policies, standards, and procedures.
• Support incident response activities and participate in security drills.
• Work closely with IT, DevOps, and development teams to strengthen system security.
• Stay updated on emerging threats, vulnerabilities, and cybersecurity trends.

---

What You Should Know:

Experience:

• 2 to 5 years of experience in cybersecurity, information security, or network security roles.

---

Security Monitoring & Tools:

• Hands-on experience with SIEM tools (Splunk, QRadar, or similar).
• Experience with firewalls, IDS/IPS, antivirus, and endpoint detection & response (EDR).
• Knowledge of log analysis and threat detection.

---

Vulnerability Management:

• Experience with vulnerability scanning tools (Nessus, Qualys, OpenVAS).
• Understanding of CVSS scoring and risk prioritization.

---

Network & System Security:

• Strong understanding of TCP/IP, DNS, HTTP/HTTPS, VPNs.
• Knowledge of Windows/Linux system security hardening.

---

Cloud Security (Preferred):

• Experience securing AWS, Azure, or GCP environments.
• Knowledge of IAM policies, cloud monitoring, and data encryption.

---

Compliance & Standards:

• Familiarity with ISO 27001, SOC 2, GDPR, PCI-DSS (as applicable).
• Experience supporting security audits.

---

Incident Response:

• Understanding of incident handling lifecycle.
• Ability to perform basic digital forensics and log investigation.

---

Scripting & Automation (Preferred):

• Basic knowledge of Python, Bash, or PowerShell for automation.

---

Soft Skills:

• Strong analytical and investigative mindset.
• Excellent documentation and reporting skills.
• Ability to work under pressure during security incidents.

---

Nice-to-Have:

• Certifications such as CEH, CISSP, Security+, CISM.
• Experience with penetration testing tools (Metasploit, Burp Suite, Nmap).
• Exposure to DevSecOps practices.
• Knowledge of Zero Trust architecture.