Cyber Security Analyst

Responsibilities

• Participating in red teaming exercises to assess the effectiveness of the organization's overall security posture.
• Should have a complete understanding and hands-on experience on IT security and monitoring, on-premises networking, Firewalls, VPN, IT and compliance policies, etc.
• Should be able to manage and develop end-to-end IT security policies, rules, and regulations, related training, and awareness programmes in the organization.
• Knowledge and hands-on on Office 365 features, policies, and Data loss prevention, Mobile device management service Microsoft INTUNE.
• Checking and maintaining end-to-end security parameters in the organization and creating and maintaining policies for different processes to secure the network and systems.
• Monitoring Security audits and different log messages from the network and the organization's IT resources.
• Perform detailed vulnerability analysis and exploit known vulnerabilities to assess the resilience of our systems against real-world threats.
• Develop and execute comprehensive test plans and methodologies to simulate potential cyberattacks and identify vulnerable areas.
• Continuously monitor, analyze, and respond to emerging security threats and trends to ensure proactive protection of our systems.
• Provide recommendations for improving security controls and implementing effective remediation strategies to address identified vulnerabilities.
• Contributing to the development and enhancement of cybersecurity frameworks and methodologies.
• Stay updated with the latest security technologies, tools, and industry trends to enhance the effectiveness of our security posture.
• Investigate and escalate security breaches or unauthorized access. Biometric and Access control management.
• Should be able to perform Vulnerability assessment, Malware analysis, Work with other penetration testers and information security analysts, Web application security, social engineering, Database security, and Reverse engineering.
• FortiGate and another industry firewall, good knowledge, and hands-on experience are required, along with monitoring and security policies implementation.
• Office 365 admin panel hands-on (managing users/devices/licenses and tracing methods for security implementation), Azure AD, email security, and policy knowledge and implementation.
  

Requirements

• Should be able to research and develop an understanding of emerging and required IT security tools that need to be implemented in the organization.
• Must have led and handled complete IT Security audits in the organization and their remediation steps to ensure high-end security at all the levels, Network and User-endpoints.
• Should be aware of ISO 27001 NIST, or COSO framework practices and GRC infrastructure.
• More than 5 years of industry experience supporting mid to large enterprise customers on their Network Security and IT infrastructure is a requirement.
• Should have experience in implementing and managing cybersecurity and technical standards.
• Must have effective communication, technical skills, with email etiquette.
• Certified Ethical Hacker (CEH) certification or equivalent.
• Must have managed stakeholder handling skills.
  

• CISSP: Certified Information Systems Security Professional.
• CISM: Certified Information Security Manager.
• CISA: Certified Information Systems Auditor.