Cybersecurity Analyst

Job OverviewWe are seeking a proactive and technically strong Security Analyst to manage security operations and respond to cybersecurity incidents across the organization. This role focuses on monitoring threats, handling incidents, improving detection capabilities, and strengthening overall security posture.The ideal candidate has hands-on experience with security tools, incident response processes, and risk management practices.Key Responsibilities1. Security Monitoring & Incident ResponseMonitor and investigate security alerts from internal systems or SOC providersLead or assist in responding to incidents such as malware, ransomware, phishing, insider threats, and data loss eventsCoordinate containment, remediation, and recovery activities with IT teamsPerform root cause analysis and recommend corrective improvements2. Vulnerability & Patch CoordinationConduct vulnerability assessments and evaluate associated risksPrioritize remediation activities based on business impactWork with infrastructure and application teams to manage patchingTrack remediation progress and report risk exposure3. Security Platform AdministrationManage and maintain enterprise security tools including SIEM, SOAR, EDR/XDR, DLP, CASB, email and web security platformsFine-tune detection rules to improve accuracy and reduce false positivesSupport integration of security platforms with enterprise systemsExperience with platforms such as Sentinel or Securonix is advantageous4. Threat Intelligence & Risk MonitoringMonitor emerging threats, vulnerabilities, and attack techniquesAssess relevance to the organization and recommend mitigation strategiesConvert threat intelligence into actionable detection or preventive controls5. Governance, Risk & ComplianceSupport compliance initiatives aligned with ISO 27001, NIST, SOC 2, PDPA, GDPRParticipate in internal risk assessments and audit activitiesMaintain security policies, procedures, and documentationAssist in vendor and third-party security assessments6. Advisory & AwarenessProvide cybersecurity guidance to IT teams, developers, and business stakeholdersSupport awareness initiatives such as phishing simulationsAct as an internal subject matter resource on cybersecurity topics7. Continuous ImprovementIdentify security gaps and propose enhancementsRecommend automation initiatives to improve efficiencyTrack and report security KPIs and operational metricsRequirementsEducationDegree in Computer Science, Information Technology, or related disciplineExperienceMinimum 3 years of experience in IT or cybersecurityUnderstanding of network infrastructure, server environments (Windows/Unix), and endpoint platformsTechnical SkillsHands-on experience with security solutions such as endpoint protection, SIEM platforms, vulnerability scanners (e.g., Tenable), privileged access management tools (e.g., CyberArk)Familiarity with platforms such as Sentinel or SecuronixStrong analytical and problem-solving skillsCertifications (Preferred)QISPCISSPCompTIA Security+Cybersecurity Nexus or equivalentPlease send your detailed resume in MS Word format to resume@goldtecHRs.com withEducation LevelWorking experiencesEach employment backgroundReason for leaving each employmentLast drawn salaryExpected salaryDate of availability