Cyber Security Analyst

Key Responsibilities

• Monitor security alerts and events using SIEM and security monitoring tools.
• Investigate and respond to security incidents, suspicious activities, and potential threats.
• Analyze logs from firewalls, servers, endpoints, applications, and network devices.
• Perform threat analysis, incident investigation, and basic threat hunting.
• Identify and investigate phishing, malware, ransomware, unauthorized access, and other security incidents.
• Support vulnerability assessment and remediation activities.
• Monitor endpoint, network, and cloud security events.
• Create and maintain security reports, incident documentation, and investigation records.
• Assist with security audits, compliance requirements, and risk assessments.
• Collaborate with IT, network, infrastructure, and application teams to resolve security issues.
• Follow incident response procedures and assist with containment and recovery activities.
• Stay updated on emerging threats, vulnerabilities, attack techniques, and cybersecurity best practices.

Required Skills

• Strong understanding of cybersecurity fundamentals.
• Knowledge of TCP/IP, DNS, HTTP/HTTPS, VPN, firewalls, IDS/IPS, and networking.
• Hands-on experience with SIEM tools such as Splunk, Microsoft Sentinel, QRadar, or similar.
• Knowledge of Windows and Linux security.
• Understanding of endpoint security and EDR tools.
• Knowledge of common cyber attacks and security threats.
• Familiarity with vulnerability management and incident response.
• Understanding of MITRE ATT&CK framework is preferred.
• Basic knowledge of Python, PowerShell, or Bash scripting is an advantage.
• Good analytical and problem-solving skills.