Cyber Security Analyst

• Monitor security alerts, events, and logs using SIEM tools.
• Identify, analyze, and investigate potential security threats and incidents.
• Perform vulnerability assessments and coordinate remediation activities.
• Monitor network traffic for suspicious activities and unauthorized access.
• Investigate phishing emails, malware, ransomware, and endpoint security incidents.
• Support incident response, containment, and recovery activities.
• Manage and monitor security tools such as EDR, antivirus, firewalls, IDS, and IPS.
• Conduct security assessments of networks, servers, endpoints, and applications.
• Analyze threat intelligence, Indicators of Compromise (IOCs), and attack patterns.
• Identify security gaps and recommend appropriate mitigation measures.
• Maintain security incident reports, documentation, and investigation records.
• Ensure compliance with information security policies and standards.
• Coordinate with IT, infrastructure, network, and application teams to resolve security issues.

Required Skills

• Knowledge of cybersecurity principles, threats, vulnerabilities, and security controls.
• Hands-on experience with SIEM tools such as Splunk, IBM QRadar, or Microsoft Sentinel.
• Knowledge of network security, TCP/IP, DNS, VPN, firewalls, IDS, and IPS.
• Experience with endpoint security tools such as Microsoft Defender or CrowdStrike.
• Knowledge of vulnerability assessment tools such as Nessus, Qualys, or Rapid7.
• Understanding of Windows and Linux operating systems.
• Knowledge of incident response and security event investigation.
• Understanding of malware and phishing analysis.
• Familiarity with MITRE ATT&CK framework and threat intelligence.
• Basic knowledge of cloud security (AWS/Azure).
• Understanding of ISO 27001 and NIST security standards.
• Strong analytical, troubleshooting, communication, and problem-solving skills.