Cyber Security Analyst

Key ResponsibilitiesMonitor security alerts and events using SIEM, EDR/XDR, IDS/IPS, firewalls, and other security tools.Investigate and triage security incidents and determine their severity and impact.Perform incident response activities, including containment, eradication, and recovery.Analyze security logs, network traffic, endpoint activity, and other indicators of compromise.Identify and investigate suspicious activities, malware, phishing attempts, unauthorized access, and other threats.Conduct threat hunting and proactively identify potential security risks.Perform vulnerability assessments and coordinate remediation of identified vulnerabilities.Monitor endpoint, network, cloud, and application security controls.Support security investigations through log analysis, forensic evidence collection, and root-cause analysis.Develop and maintain security rules, detection use cases, alerts, and monitoring procedures.Participate in security assessments, audits, penetration testing, and compliance activities.Assist with security awareness initiatives, including phishing simulations and user education.Maintain incident documentation, investigation reports, security metrics, and dashboards.Work closely with IT infrastructure, network, application, cloud, and compliance teams to resolve security issues.Stay updated on emerging cyber threats, vulnerabilities, attack techniques, and security best practices.Required Technical SkillsStrong understanding of networking concepts: TCP/IP, DNS, HTTP/HTTPS, VPN, firewalls, proxies, and routing.Hands-on experience with SIEM platforms such as Microsoft Sentinel, Splunk, IBM QRadar, or similar.Knowledge of EDR/XDR solutions such as Microsoft Defender, CrowdStrike, or SentinelOne.Understanding of endpoint and server security across Windows and Linux environments.Knowledge of common cybersecurity threats, attack vectors, and vulnerabilities.Experience with security incident investigation and response.Familiarity with MITRE ATT&CK, IOC analysis, threat intelligence, and security frameworks.Basic understanding of vulnerability management and tools such as Nessus, Qualys, or Rapid7.Knowledge of email security, phishing, malware, and identity-related attacks.Familiarity with cloud security concepts across Microsoft Azure, AWS, or GCP is preferred.Basic scripting knowledge in PowerShell, Python, or Bash is an advantage.Soft SkillsStrong analytical and problem-solving abilities.Excellent attention to detail.Ability to prioritize and respond effectively to security incidents.Strong written and verbal communication skills.Ability to work under pressure in a security operations environment.Good documentation and reporting skills.Ability to collaborate effectively with technical and non-technical stakeholders.