Security Analyst (Hybrid)

• Threat Monitoring and Detection: Continuously monitor security systems, networks, and applications including SIEM systems, intrusion detection systems (IDS), and firewall logs for suspicious activities and potential security breaches. Use various tools and technologies to detect security incidents promptly.
• Incident Response and Investigation: Respond to security incidents, performing triage, root cause analysis, and initiating containment and remediation actions.
• Security Tools: Utilize security tools and technologies to detect, prevent, and mitigate security threats. Maintain and update these tools to ensure optimal performance.
• Threat Intelligence: Gather and analyze threat intelligence from internal and external sources to stay informed about the latest security threats and trends.
• Threat Analysis/Vulnerability Management: They conduct vulnerability assessments and penetration tests to identify weaknesses in systems, applications, and networks. They prioritize vulnerabilities based on risk and work with relevant teams to remediate them.
• Security Awareness and Training: They contribute to security awareness programs by developing educational materials, conducting training sessions, and promoting security best practices among employees.
• Compliance and Risk Management: They assist in compliance efforts by ensuring that security controls align with regulatory requirements and industry standards. They conduct risk assessments and advise on risk mitigation strategies.
• Security Incident Documentation and Reporting: They maintain detailed records of security incidents, including their investigation findings, actions taken, and lessons learned. They prepare incident reports for management and regulatory authorities as required.

• Minimum of 2 years of experience in a SOC analyst or similar role.

Computer Skills: 

• Knowledge of various security methodologies, processes, and technical security solutions (firewall, intrusion detection systems, load balancers, endpoint security systems etc.)
• Experience in system administration of Windows.
• Knowledge of TCP/IP Protocols, network analysis, and network/security applications
• Knowledge of scripting languages (e.g., Python, PowerShell) for automation and analysis.
• Ability to multi-task, prioritize, and manage time effectively.

Certificates & Licenses:   

• COMPTIA Security +
• AWS Security Specialty Certification
• Pentest+ Cysa+

.