Analyst - IT Security

Job Summary: We are seeking a proactive and technically skilled information security (SOC) Engineer/Analyst to monitor, detect, and respond to cybersecurity threats in real-time. The ideal candidate will have strong analytical skills, be detail-oriented, and possess a sound understanding of threat landscapes, SIEM tools, and incident response. The ideal candidate will possess a strong foundational understanding of cybersecurity governance, robust technical skills in security operations, and a commitment to staying abreast of the evolving threat landscape and internal security requirements.

Key Responsibilities

• Monitor security events and alerts from SIEM and other security tools.
• Perform initial triage and investigation of potential threats or anomalous behavior.
• Escalate incidents according to severity and defined procedures.
• Document incidents, provide root cause analysis, and maintain detailed logs.
• Analyze threat intelligence feeds and correlate with internal data.
• Assist in threat hunting and vulnerability management activities.
• Support continuous improvement of SOC processes and playbooks.
• Collaborate with other IT and Security teams for incident resolution.
• Assist in developing and tuning SIEM rules, queries, and dashboards for threat detection.
• Contribute to vulnerability management and secure configuration of internal systems and cloud environments.
• Support the testing and execution of recovery plans for security systems and data.
• Document incident findings, remediation steps, and contribute to post-incident reviews.

Required Skills & Qualifications:

• Bachelors degree in Computer Science, Cybersecurity, or related field.
• 1–3 years of experience in a SOC environment or similar security operations role.
• Familiarity with SIEM tools (e.g., Splunk, QRadar, Sentinel).
• Understanding of TCP/IP, firewalls, IDS/IPS, and common attack vectors.
• Knowledge of malware, phishing, ransomware, and social engineering tactics.
• Hands-on experience with endpoint protection, network monitoring, and forensic tools.
• Excellent communication and documentation skills.

Preferred Certifications:

• CompTIA Security+ or CySA+
• Vendor-specific SIEM certifications.